"GDPR failed because it did not mandate a users right to clearly say NO"
I wish people read GDPR at least once.... that kind of snooping is illegal under GDPR. There was no informed consent, and if's far beyond the "lawful basis for processing". GDPR also requires any consent can be withdrawn at any time - and it must be simple to do. Moreover, you can't refuse a service requiring to consent to more data than those strictly required to deliver a service.
The real question is how much governments are going to go after big companies. They now have the instruments - the will?
Biting the hand that feeds IT
