Crazy how people whose job it is to build this crap, don't even know what the actual rules are.

It's almost as if they just want to collect all the data on all the users forever without any oversight, by continuously rehashing bad and misunderstood versions of the GDPR and pretending it's hard and complex and vague.