Regulators have doubts that promises of consent-based data collection by digital publishers and advertisers is based on genuine user consent.