Replying to @gabrielazanfir and @PrivacyMatters, @buchtan, @CNIL
Here it isn’t saying that you can’t have a contract ascribing responsibility for consent but it is not sufficient (not, I presume, necessary) and the facts of accountability matter more.
This does make it hard to see how useful a contract would in general be, though.