My experience is that devs generally lack the desire and expertise to read and interpret legal texts. According to GDPR isn't not their job either. Each company

My experience is that devs generally lack the desire and expertise to read and interpret legal texts. According to GDPR isn't not their job either. Each company needs to employ or hire a Data Protection Officer (DPO) who is responsible for keeping track of data protection regulations and ensuring they are applied company-wide. IMHO, as long as devs weren't trained on cookie law, they are not morally responsible.