Ask HN: Why most websites violate GDPR even with annoying popups?

In order to collect personal data, you need to get explicit consent from the user. We can see such consent requests across the web on any advertisement based websites.

If we check developer tools, we can clearly see that cookies already been set. Google analytics scripts been loaded. It doesn't look as an opt-in for me.

Even if we try to comprehend content of such requests, it'll send the user to hundreds of websites in order to read their "Privacy Policy".

Does it violate General Data Protection Regulation? Because I can't see the way it's not.

Why to use such popups in the first place if you still violate the rules?

Even Google been fined for violating GDPR:

https://www.cnil.fr/sites/default/files/atoms/files/san-2019-001.pdf

> 101. In the two cases described, five actions are necessary for the user to access the information relating to personalised advertising and six for geolocation.