Spoiler alert: we have that law. The GDPR as it stands outlaws annoying/misleading consent banners.

Next step: fire the incompetent people staffing the various data protection agencies and replace them with someone that would actually enforce said law.