GDPR doesn't say you have to 'warn' for 'cookies' but that you have to ask consent for data processing before doing it and you can't deny people if they don't w

GDPR doesn't say you have to 'warn' for 'cookies' but that you have to ask consent for data processing before doing it and you can't deny people if they don't want that. If you happen to use a cookie to track a user for data processing then you may pop up a cookie-specific message. In the end what needs to happen is exactly what GDPR is made for: don't grab people's data and track them unless they say it is OK to do so.