There's no risk, they know what they are doing because the law doesn't just mandate the banner, it mandates you to know which third party service you're sharing the data to.

Check the banner next time, you'll see how many “partners” they do sell your data to.