Comment by atoav

Yet another thing that GDPR makes harder. That law people think forces websites to display cookie banners is actually a law that requires you to gain freely given informed consent by the person whose personal data you want to process.

Whether you do that on a website, app or in a grocery store is irrelevant. Every person needs to be (1) informed about what data you are recording, (2) what you plan to do with it, (3) who else sees it and then (4) they need to say yes to all of that. Oh, and the No option needs to work equally well and you are not allowed to record any data before they say either yes or no.

That would be the law. In practise even many websites don't fulfill it.

Imagine how well that would make you look as a grocery store.