Sorry mate, the GDPR is there for a bloody good reason; and legit companies obey the law.
But at least we have cookie banners everywhere.
That being said, it was very early regulation in this field, and more recent approaches are already better, e.g., GDPR, DMA.