That's just not true, it's a going concern for anyone working on online projects in Europe. It's come up for me personally in discussions with every client on every project for the last 4 years now. We're even at the point where major companies are being fined for misteps:

https://techcrunch.com/2022/03/15/facebook-2018-breaches-dpc...

Where are you getting your data from?

not the commenter, but I would imagine they're referring to the stipulation in GDPR that it must be as easy to decline marketing cookies as it is to accept them, which the overwhelming majority of websites don't abide by

Okay, so no data. Just speculation.

if you've been on any websites in the EU (or a country with similar DP laws) recently, you'll know this without even thinking

but here you are anyway: https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-is... https://noyb.eu/sites/default/files/2022-07/ANNUAL%20REPORT%...

if you still don't believe me, try and use google maps, or youtube in incognito mode

We take GDPR very seriously in the EU. Fines are steep. There are difficulties getting foreign companies to comply, and there isn't a one-size-fits-all compliance toolbox for those breaches.