Sadly the law is written in a way that let’s the optional part be disregarded if the business considers the data that’s being shared necessary to run its business model... and advertising companies like Facebook will argue all data can help them sell ads better or for more money, hence all sharing of data shouldn’t need to be optional. This has yet to be tested in court, but both google and Facebook have taken this approach in their implementation of gdpr, leaving us wondering what the point was anyway... law without teeth :( the eu should have already slapped down google hard for their lack of an opt out, but it’s been years and still nothing. Seems the law makers aren’t really on the side of privacy after all.