It is a gray zone. Some national regulatory agencies has said ”pay or consent” is compatible with GDPR and some have said it is not. It hasn’t yet been tested by the EU court.