Google, Microsoft, Meta All Tracking You Even When You Opt Out, According to an Independent Audit

[dickthegrouch]

1. That's partly a browser code failure

The browser could signal success on the cookie placement, but actually perform a null operation.
Subsequent attempts to read the cookie should just return a failed read, or null data in the case of CA , where the site is not allowed to give a different experience if the cookies are not accepted.
Then it would not be up to the website developer to honor the opt-out but would be performed directly at the user level.
Of course “secure by design AND SECURE BY DEFAULT” means those opt-outs should really by opt-in’s.
Nobody is getting an ISO27018 cert from me anytime soon!!