EU cookie laws have been in place since 2011, but before the entry into force of the GDPR, the conditions for consent were interpreted differently across Europe. Since the GDPR came into effect, there has been a great deal of interest in how it applies to cookies and similar technologies. The GDPR updated the EU’s longstanding digital privacy framework, with key additions including tightening the rules around consent as a legal basis for processing personal data. The purpose of this study is to clarify for data controllers the rules they need to pay attention to, in order to ensure that the use of cookies on its websites is strictly in accordance with applicable laws