But you're right that it does validate the LA Times's decision to not spend resources on it, if there's an easy way to offload the legal worry to another company.
But you're right that it does validate the LA Times's decision to not spend resources on it, if there's an easy way to offload the legal worry to another company.
Another aspect: I've set up my browser to be pretty aggressive about blocking ads & trackers, to the extent that in practice any website is limited to tracking only what they can collect server-side, with first-party isolation; as such, GDPR doesn't give me that much extra protection when I'm interacting with sites that I'm not actively giving my personal details to.
I'd still appreciate the additional protections GDPR provides, in terms of control over that server-side tracking, and when interacting with sites that do know who I am; and I see the value in even the protections I don't personally benefit from, for the sake of people who aren't tech-savvy enough to lock down their browsers to the same extent (and to deal with it breaking sites, when that happens). So I'm still a fan of GDPR in general - it's just that, when it comes to me personally, just passively browsing a site, my own browser set-up is adequate for my liking.