I feel like more laws should be like the GDPR and recognize that consent is only really given when you have the option to not give it without the loss of functionality.