I am not sure if Europeans can even take this article seriously after reading about "cookie management requirements apply for EU websites generally" which is wr

I am not sure if Europeans can even take this article seriously after reading about "cookie management requirements apply for EU websites generally" which is wrong in at least three major ways: GDPR is not just about cookies, GDPR is about data processing and its purposes rather than management and storage, and GDPR applies to all websites (including American) who serve European customers. "Per the Court of Justice of the European Union, IP addresses are personal data (the court also considered Cookiebot’s “user key” to be personal data)." They seem to be using the term personal data (correctly) but I cannot help but sense some disdain for it in the writing as if the writer was still thinking personal data being PII (which it's not). A 5-star rating I give a driver is also personal data because it generated by me or obtained from me (and that's why you can get it when you request an export of your data under GDPR). But then the article goes on to nitpick on the definitions: "Because the Wiesbaden court cited the CLOUD Act as a reason to limit U.S.-based services, we note that the claim for “any US connection” is incorrect, because the CLOUD Act only applies under U.S. law where there is possession, custody, or control in the U.S." Possession, custody, or control pretty much covers everything when it comes to cloud computing infra. "NOYB has filed over 100 complaints alleging improper transfers to the U.S., for a range of data analytics and cookie plug-ins that are pervasive in the current online ecosystem." I am a happy supporter of NOYB and glad to see my donation being used well. Though I am a bit worried about being able to use Cloudflare in the future.