- No option (27.8%)
- Confirmation with no opt-out (68%)
- Binary (3.2%)
So ~96% of websites sampled are not GDPR compliant, inadvertently or intentionally.
I agree with the conclusion of the study:
"The business model of online behavioral advertising, which targets ads based on large amounts of personal data, should be challenged, and alternative models like privacy-friendly contextual advertising or other ways of monetization for web services need to be developed."