> Moreover, online platforms should not make denying consent for processing personal data more complex than giving it, and refusing consent should not be penali

> Moreover, online platforms should not make denying consent for processing personal data more complex than giving it, and refusing consent should not be penalised by disabling functionalities. This really should have been clear from the start, or at least clarified by a judge early on trying to make sense of the law. If the law says you have to give people a free choice, but you deliberately make one choice take 100 times longer than the other, then that clearly goes against the intent of the regulation. > It also prevents platforms from requesting such consent if users already choose via ‘automated means’, which might be a setting in the web browser or operating system. I don't know if browsers will be able to default the setting to "don't track me", but they could argue that someone downloading a "privacy-respecting browser" is itself a statement of intent and the user doesn't need to separately choose how they want the browser to respond to sites. > The provisions require platforms to enable users to use and pay for services anonymously “wherever reasonable efforts can make this possible.” I'm sure a lot of cryptocurrency companies are going to start making it "reasonably possible" for sites to accept their coins as an anonymous payment mechanism, forcing the hands of websites. Presumably the market will pick a few "good" crypto companies, and mean EU citizens will be able to make purchases online without having to type their credit card numbers (and billing addresses) into random sites.