Dark patterns aren't actually a valid approach of complying with the regulation - if you do that, you may as well just track and collect data without consent, b

Dark patterns aren't actually a valid approach of complying with the regulation - if you do that, you may as well just track and collect data without consent, because any consent obtained by misleading or annoying the user does not count as valid anyway. Here's what the UK legislation has to say (which is still identical to the EU GDPR as far as I know, though subject to change post-Brexit): https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/ https://ico.org.uk/for-organisations/guide-to-data-protectio... > Consent requires a positive opt-in. Don’t use pre-ticked boxes or any other method of default consent. > Explicit consent requires a very clear and specific statement of consent. > Keep your consent requests separate from other terms and conditions. > Be specific and ‘granular’ so that you get separate consent for separate things. Vague or blanket consent is not enough. > Be clear and concise. > Make it easy for people to withdraw consent and tell them how. > Avoid making consent to processing a precondition of a service.