You might be ignorant on purpose. The law does not mention cookies at all, it says how personal/private information must be handled, and under what conditions collecting such is permissible.

Yes, but this exchange is in the context of cookies, as you brought up in your comment. And we're talking about companies maliciously complying with the cookie pop-up mechanism, are we not?