Well, GDPR superseded the cookie banner thing and the banners are now trying to gain dubious "consent" about being tracked in all kind of ways, since GDPR is trying to make PII into "radioactive waste" in a way - i.e. the plan is that the best way to avoid dealing with GDPR is to minimize contact (and thus gathering of) with PII.