We used to have a Do-Not-Track header, which all websites promptly ignored.
The hard part is having a legally-binding standard
Given the current available API, I'd imagine the law-maker could have decided to write in the law 'consent must be collected through a javascript window.confirm() popup'
The hard part is having a legally-binding standard
Given the current available API, I'd imagine the law-maker could have decided to write in the law 'consent must be collected through a javascript window.confirm() popup'