GDPR, cookies, and compliance

• The General Data Protection Regulation (GDPR) is EU law that governs the collection and processing of personal data from individuals inside the EU.
• Website owners and operators are responsible for making sure personal data is collected and processed lawfully.
• Websites outside the EU must also comply when they collect data from users inside the EU.

Cookie consent is a core part of that compliance for websites with EU-located users.

Cookies are one of the most common ways personal data is collected and shared online, so the GDPR includes specific rules for their use.

That is why end-user consent remains one of the main legal bases for cookie usage and related personal-data processing.