Consent asymmetry and “opt-out hurdles” are drawing fines. The compliance gap is technical, not legal language.