Yes, & they are also gunning for ePrivacy - using client-storage for tracking is easy to detect, as is the obtaining of valid consent. If 5(3) had been enforced the majority of exploitative illegal PD processing, & resulting enshitification, would have been stopped decades ago.

There is a very large loophole in that controllers claiming to be "media organisation" would not be required to respect the signal, so data subjects would not have the right to refuse their online activity being processed for behavioural advertising purposes (paragraph 3).

gee, won’t regulators think of the poor multi-billioners profiting out of theft, environmental destruction, and shitty and harmful tech they keep pushing aggressively into the public