You wrote: > GDPR requires neither of those explicitly, this is just the interpretation by most regional Data Protection Commissioners. No. https://gdpr-info.

You wrote: > GDPR requires neither of those explicitly, this is just the interpretation by most regional Data Protection Commissioners. No. https://gdpr-info.eu/recitals/no-32/ https://gdpr-info.eu/recitals/no-32/ says: > When the processing has multiple purposes, consent should be given for all of them You wrote: > This is misleading at best - there can be an "Accept All" Button. No. https://gdpr-info.eu/recitals/no-32/ https://gdpr-info.eu/recitals/no-32/ says: > Silence, pre-ticked boxes or inactivity should not therefore constitute consent. The legal text of the GDPR explicitly bans pre-ticked boxes for types of consent. You have to manually tick each box individually.