gdpr is a different thing than the cookie law, refusing consent is a real thing that everyone in the industry spent a hell of a lot of time and effort implementing to the letter because the fines for companies are way too large for anyone to ignore