Not honoring Do Not Track (DNT) is a #GDPR violation. If you receive a DNT signal, you must turn off all tracking. Furthermore, as the person has made their choice explicit and clear, you must not ask them again (via popovers, modals, etc.)
How do we get this enforced. The first part seems like it is already covered by GDPR. Would the second half we enforceable under the current framework?