Without wishing to derail from the main point, they are very easy to comply with, but they have broadly not been complied with.
Any site with PII collection where the "deny optional cookies" button isn't right there, and not deemphasized, is conducting illegal data collection. But as the enforcement is carried out by national agencies who appear not to have given any shits for a decade, everyone has been getting away with making users jump though stupid hoops (that not only are not required by the law as the sites imply, but are actually outright forbidden) like navigating a dark pattern minigame or outright cunty behaviour like making the "deny" button hang with a spinner indefinitely.
Without wishing to derail from the main point, they are very easy to comply with, but they have broadly not been complied with.
Any site with PII collection where the "deny optional cookies" button isn't right there, and not deemphasized, is conducting illegal data collection. But as the enforcement is carried out by national agencies who appear not to have given any shits for a decade, everyone has been getting away with making users jump though stupid hoops (that not only are not required by the law as the sites imply, but are actually outright forbidden) like navigating a dark pattern minigame or outright cunty behaviour like making the "deny" button hang with a spinner indefinitely.