The law had good intention but bad implementation. Also the law takes so long to change. Once it became obvious that companies would bypass it by having clicking gymnastics they needed to quickly update the law saying that it should only take one click to opt out.

What is wrong with its implementation? All the cookie banners aren't in the law; their basically malicious compliance.