@theorytoe @kravietz It never holds up, because the protections the EU citizen is supposed to have thanks to GDPR can be mostly avoided through TOS/EULA wording. One of the very few that is always enforceable is the right to be forgotten, but even that can be made to be ludicrously annoying to do, so you just give up.

One of the big selling points for GDPR was that transfer of your data to 3rd parties had to be disclosed. So what did the companies do? They've put those connections on page 60 of their TOS/EULA that literally nobody reads. Part of GDPR successfully avoided.

On a related note. The mandated cookie banners and their option buttons aren't supposed to have "dark patterns" (bright color for the "fully agree" option and a normal bg color for the "Allow only essential" option). Goes how many of those cookie banners actually follow this rule... Basically none of them. Or another option to bypass this rule is to create payment options for your site related to ad tracking for example, make all the buttons have the same shape and color. That's it, now everybody will agree to the "full" tracking, because other options are behind a paywall.

Basically every EU law related to tech is a joke similar to this.