There’s no such thing in the law. The cookie banner is a direct consequence of the law. It doesn’t say anything about cookies.
You know those modal screens that interrupt your groove when you are surfing?
There are no laws forcing websites to use them.
They use them because they choose to.
So basically, we tell companies the same thing we tell young boys: if it's getting private, you need consent.
You'll notice the words "cookie" or "banner" appear nowhere in this paragraph. That's because they are not the focus of the law.
The only thing that matters is that if an entity wants to track people, they have to let them know in a way that is clear and request their approval.
Well not just letting them know, also keeping a record that they've received consent.
You can't even use Google Analytics without having to display a banner. Most of my clients just renounce to use analytics data because they don't want to bother with that and they're afraid of not doing it right and risking fines. They miss out on precious analytics data and it can hurt growth. And then we wonder why the GDP is stagnant here.
Well in reality, the abusers that dared to install a script to know for how long a visitor stayed on their site don't end up failing, they just end up moving to the US while we're here complaining that there isn't any tech company left here.
You seem to forget the domestic (for you I guess) privacy laws. This isn't just the GDPR, there is also PIPEDA for Canada, the CCPA and CalOPPA in California. Then Virginia, Colorado, Connecticut and UTAH also have their own versions. And from July Florida, Oregon, and Texas are joining the party. In October you get Montana. And then next year Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Indian and Kentucky follow.
LOL The diversity would make companies long for a coherent all encompassing GDPR framework
Oh wait then there is the ADPPA in the working but ever so slow.
This isn't going away, no country in the world will be and should be immune. All companies have to do is get with it, comply and not abuse our data.