> In this case the only way you could be compliant This is overstated. Yes, consent must be clear. But it doesn't have to be a popup; merely clear. And you

> In this case the only way you could be compliant This is overstated. Yes, consent must be clear. But it doesn't have to be a popup; merely clear. And you would probably be legal to require users to pay more to avoid data collection -- there are conflicting cases from the ICO / washington post case and the Austrian DPA / derStandard.at case.