It is complex and it's not just about OBA, cookies and advertising. As with the recent Vidal-Hall Vs Google case, there's clearly a growing sentiment that "enough is enough", you can't make vast sums of money trading personal data when you never asked permission in the first case.
