GDPR has learned from the cookies law: - you cannot 'comply' by forcing the user to accept - better enforcement options (of course only when the site provider is under EU jurisdiction)

The jury is still out, but it is only a few months since GDPR is in place.