GDPR is a bit more than cookies banners… it gives rights to European like deletion of one’s data, right to get a copy of one’s data, portability to some extent and a lot of transparency about what processing is happening. And if one of our DPA is taking an interest in a particular sus processing they can forbid it altogether which all companies fear much more than fines. It’s really a beautiful piece of regulation. And I’m not saying only because I make part of my living out of it :)