If you don’t collect personal data (and 99% of those that do shouldn’t), you don’t need to do anything to be compliant. If you need personal data and don’t do a

If you don’t collect personal data (and 99% of those that do shouldn’t), you don’t need to do anything to be compliant. If you need personal data and don’t do anything weird with it (weird being systematic violation of your users’ privacy), compliance is straightforward (I’ve lead two GDPR compliance projects in the past 2-3 years). If a company has to show 300 banners and asks for consent multiple times, it’s because they are doing extremely weird stuff. Legislation just made it visible.