Recent US research has revealed that, in many cases, user data is still being collected, processed and shared even when users opt out through a Consent Management Platform (CMP). This discovery has raised important questions about the effectiveness of CMPs for protecting online data privacy.