It depends on the country. GDPR is not a law. It's a framework that countries use to implement national laws. GDPR doesn't say anything about one-click rejection, but some countries added it to their national law.