You can't sue them. That's the reason so many non-compliant consent flows are out there, and entire businesses have been built on providing them as a service.

You can't sue them. That's the reason so many non-compliant consent flows are out there, and entire businesses have been built on providing them as a service. The best you can do is to complain to your country's data protection agency (in the UK this would be the ICO, in France the CNIL, etc). The problem is that they aren't enforcing the regulation enough to deter non-compliance. It's cheaper (in fact, free most of the time, the worst you will get is be asked to get into compliance despite breaching the regulation for years) to breach it for as long as you can than to respect it.