I was just under the impression that the GDPR required that these notices have an “opt out” button.
Not my area of expertise. In fact, I think the notices aren’t even required, if a sufficient privacy policy is published, and the site is fairly passive.
It's actually not the GDPR, but the EU cookie directive[1], which isn't actually in-force yet so "these notices" are definitely not required yet. If/when it does come into force, the current prevailing opinion[2] is probably the best set of clues as to what actually will be required.
I was just under the impression that the GDPR required that these notices have an “opt out” button.
Not my area of expertise. In fact, I think the notices aren’t even required, if a sufficient privacy policy is published, and the site is fairly passive.