I think the really crazy thing about the cookie banner stuff is that it’s actually nothing to do with GDPR: it’s almost entirely about the ePrivacy Directive of

I think the really crazy thing about the cookie banner stuff is that it’s actually nothing to do with GDPR: it’s almost entirely about the ePrivacy Directive of 2002. Yes, 2002. (At that time it was opt-out, but you still had to disclose clearly; in 2009, it was revised to opt-in, and there was again very minor fuss but not much compliance.) It’s just that most people didn’t do much about it until GDPR came along, and then people conflated the two.