Yes. In short, I start with a friendly email. If no response, I follow up with a formal, signed complaint. Then if no action, I report to our country's DPA.
In quite a few cases, the friendly email alone does the trick. Sometimes the premature cookies are indeed a bug, and get fixed quickly.
Which sites? Could you name some examples, please?