Do Not Track header? It's the silver bullet but the stakeholders will argue it is invalid and cannot possibly be used to inform the server that the client wishes not to be tracked

I don’t know how to fix it, but I know it isn’t fixed now. We have both tracking and cookie banners.

It’s not a tracking banner but a cookie banner and some applications have a legitimate need for cookies. They abuse what is legitimate, but you can’t ask regulators to check every site without a national (European?) white liste firewall (shouldn’t give them ideas…).

Also, most tracking used to use cookies but if that becomes illegal there’s others ways.