Hacker News Reader

Does this mean those sites that require you to go to a "legitimate interests" page and manually uncheck all of them are breaking the law?

As I understand GDPR you're not even allowed to de-emphasize the reject cookies button.

Yes.