[phba]

The legislation simply says if you collect more data about your users than necessary, you must inform them and they must consent. This has nothing to do with cookies or any other tech.

The question a user should ask is why is this website collecting my data. Marketing and adtech companies are trying to shift this question to why is the EU making websites worse.

> there is no need for government regulation here

You don't need to care about this if you respect users' privacy in the same way you don't need to care about waste water regulation when you don't pump waste into rivers.