Do you need consent for cookies?

To set cookies on a user’s device, websites need to obtain prior consent from the user. This requirement is based on the provisions of the General Data Protection Regulation (GDPR) and ePrivacy Directive (cookie law), applicable in the EU. 

Cookies are part of personal data as per the GDPR as they can store information about users. Hence, before dropping cookies on a user’s device, websites should obtain consent. To achieve this, websites should display a cookie banner or popup when a user visits the site and ask for their consent.