Early research into this question suggested the one-time consent approach employed by GDPR might disproportionately benefit large companies offering a more extensive scope of services and therefore visited by users more frequently.