To be fair, GDPR was first proposed in 2012. In 2016 it was written into law, and then in 2018 it became enforceable. It was these adtech companies that choose to ignore implementing it and/or to do it as late as possible.