Ironically 99% of them don’t meet legal requirements. They serve no purpose.

The purpose is to make people think laws like gdpr are bad for people, rather than bad for the surveillance industry.