So, I'm going to argue that GDPR didn't go far enough, since the intended (or at least, implied) goal was to put Ad-Tech firms out of business. If your business

So, I'm going to argue that GDPR didn't go far enough, since the intended (or at least, implied) goal was to put Ad-Tech firms out of business. If your business cannot operate without spying on people, it shouldn't operate. Being able to confuse people into "consenting" was an unintended consequence, but hopefully the European court system can put a stop to this dark pattern nonsense.