The assertion that there are spillover effects because other companies see the companies they target comply and suddenly want to follow the law is strange causation. Most likely this is because "cookie compliance" is outsourced to a firm or open source software. Once a company has been threatened, those will get fixed - the company is unlikely to maintain a private branch. And then those fixes will migrate to wherever else that firm or software touches.