I spent 20 years making compliance systems for OFCOM and later GDPR for the major UK banks. I promise I know more than 99.99% of the population on this subject.

The guidance on consent-or-pay is here and the link to report the Guardian when you find the specific infringement is here

Let us all know what you find.