Earlier quoted context omitted.
Given that (from my IANAL understanding) the GDPR requires opt-in and forbids "click I accept or leave our service" style forced opt-in, I'd say this is not even CYA - it's closer to magical cargo cult incantations.
> the GDPR requires opt-in and forbids "click I accept or leave our service" That's an asinine law if I ever saw one. Telling me how I should run my business? Really? From what vantage point, if I may ask? If I had a company, I would ignore the whole thing and invite them to cross the pond and try their crap in my jurisdiction, under my laws. Or just block them altogether. If they want to go back to the middle ages,…
I guess the authors understood that without that clause, there would be an obvious loophole that would indeed lead to nothing more than annoying pop-ups and reduce the desired consumer choice to name-only. So they took the logical step to close the loophole.
Of course many businesses are trying to counter with a pop-up anyway. But then, that's not the fault of the regulation.