As the paper states, the GDPR is comically unenforced. I doubt these 'legitimate interest' cookies are compliant with the law. In practical terms, they don't ne

As the paper states, the GDPR is comically unenforced. I doubt these 'legitimate interest' cookies are compliant with the law. In practical terms, they don't need to be. Nothing happens to websites that break the rules. > The processing must be necessary. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legitimate-interests/ https://ico.org.uk/for-organisations/guide-to-data-protectio...