Several regulators have made unambiguous statements that they are not compliant. However, they are not very high on the enforcement priorities. ICO, the UK reg

Several regulators have made unambiguous statements that they are not compliant. However, they are not very high on the enforcement priorities. ICO, the UK regulator, seems to take a dim view of dark patterns, but they're only outright banned for children's content: https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/how-do-we-comply-with-the-cookie-rules/ https://ico.org.uk/for-organisations/guide-to-pecr/guidance-... (PDF) Irish DPA's sweep of thirty-odd websites under its jurisdiction. Lots of good guidance here, but for the point specifically under discussion, ctrl+f "nudge." https://www.dataprotection.ie/sites/default/files/uploads/2020-04/Report https://www.dataprotection.ie/sites/default/files/uploads/20... by the DPC on the use of cookies and other tracking technologies.pdf (PDF) English translation of Greek DPA cookie guidance. See in particular the last page, "Bad Practices." https://iapp.org/media/pdf/resource_center/Greek_DPA_Cookie_Guidance_IAPP.pdf https://iapp.org/media/pdf/resource_center/Greek_DPA_Cookie_...