And we don't need a law for that, it is already working. We may need a law to protect that freedom, and for most part, it is on that side as we already have rulings saying that ad blocking is not illegal, and enforcement of browser choice, some of them having built-in blockers.
As the name says, it's a General Data Protection Regulation. It covers all types of processing from all types of entities, everything from big tech websites to your local yoga instructor who doesn't have any online presence.
It is also kind of ironic that the article suggests a technical solution to a legal problem, arguing that a legal solution doesn't work (consent fatigue, DNT, ...) and then suggests legislating on it.
I wasn't implying that ad blockers are a substitute for GDPR, which goes way beyond cookies and things that can be done at the browser level.