Probably the same way most laws end up. We see the unintended consequences, then revise the law to counter the consequences. Thus the cat/mouse game continues.

An idea could be that the tracking has to be opt-in AND the webpage cannot stop critical use of the page as part of the opt-in process.

Then another round of consequences.. rinse repeat...