So many sites do:
“Here are cookie, advertising, tracking policies. Here is an OK button.”
After not clicking the ok button but attempting to continue:
“You must agree to our tracking policy”
That is explicitly not allowed/illegal under GDPR.
American companies including the Washington Post really have a damn hard time wrapping their head around that an agreement means you can decline to agree to it, and GDRP says refusing to be tracked is not grounds for a site to refuse service.
@szbalint Technically, that's not correct afaik. It's only illegal to require consent for collecting data in order to fulfill a contract. You do not have an implicit contract with a site you're not logged in and subscribed to, or any kind of right for a website to serve you. And as GDPR allows to store data for "legitimate interests" an ad-based website could argue that their revenue is based on adding those trackers.
@szbalint Don't get me wrong, I'm as anti-tracking as it gets, but I have a strong feeling that many people will have a rough awakening after lawsuits in the near future. GDPR allows for quite some nasty stuff.