We used to have a Do-Not-Track header, which all websites promptly ignored. The hard part is having a legally-binding standard Given the current available AP

We used to have a Do-Not-Track header, which all websites promptly ignored. The hard part is having a legally-binding standard Given the current available API, I'd imagine the law-maker could have decided to write in the law 'consent must be collected through a javascript window.confirm() popup'