Key to note that the cookie banner fiasco wasn't GDPR, it was a separate policy that should be changed.