As I begin talking about the role Hub sites can play in our wider outreach solutions, the Marketing lead highlighted the following.
"Before, we had a tracking approval pop-up much like the one in Hub, however we have been forced to upgrade to a more advanced version, that allows different levels of tracking. What was happening was that certain people familiar with the legislation were actively going out and finding websites with the simple cookie feature. They would then write to the Company claiming their rights were being violated and demanding compensation. This happened to us on a few occassions before we made the change."
Now, I don't claim to be an expert, but I would imagine Esri have professionals in house will know the nuiances of this that can advise.
My idea is to validate if the above story could occur to a Hub site and if so create some form of more advanced consent feature to mitigate the risk.