It's both. The law itself is poorly thought-out and overly restrictive. And then websites also don't understand it and do stupid things in the name of complianc

It's both. The law itself is poorly thought-out and overly restrictive. And then websites also don't understand it and do stupid things in the name of compliance, which are neither compliant nor beneficial to the user.