Government can point to the highly visible cookie banner and declare its promise met in addressing data privacy issues. Industry, now that a compliance solution has been agreed on and normalized, prefers a known system with which they can easily comply and are unmotivated to push for a reform. While users, faced with endless click-throughs, learn not to assert their rights but to surrender them reflexively.