It's actually not the GDPR, but the EU cookie directive[1], which isn't actually in-force yet so "these notices" are definitely not required yet. If/when it doe

It's actually not the GDPR, but the EU cookie directive[1], which isn't actually in-force yet so "these notices" are definitely not required yet. If/when it does come into force, the current prevailing opinion[2] is probably the best set of clues as to what actually will be required. [1]: https://gdpr.eu/cookies/ https://gdpr.eu/cookies/ [2]: https://www.linklaters.com/en/insights/publications/tmt-news/tmt-news---june-2017/eu---status-of-the-proposed-eprivacy-regulation-tighter-cookie-rules-and-more https://www.linklaters.com/en/insights/publications/tmt-news...