Websites that operate in Europe are supposed to follow GDPR rules that let consumers to opt out of cookie-type tracking. However, most are making it "substantially more difficult" to reject all tracking than to accept it, according to a new study cal…