The GDPR doesn’t allow opt-out consent to count as consent. The only consent it recognizes as valid consent is opt-in.
However, since we are discussing the banner that The Guardian website shows to US viewers, I assume they’re trying to comply with California privacy law, which does allow opt-out regarding the sale of personal information.
> The GDPR doesn’t allow opt-out consent to count as consent.
wat
GDPR says that opt-out is the default, and if you are asking for consent, it had to be clear, unambiguous, and with both chouces clearly present.