Cookie policy in GDPR
Weirdly enough, the word "cookies" does not appear in the original text of the General Data Protection Regulation (GDPR). Instead, the GDPR refers more generally to concepts like "personal data," "processing," and "information society services." The closest the GDPR comes to addressing cookies specifically is in Recital 30, where it mentions "online identifiers" and specifically refers to:
"Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers..."
The more detailed regulations regarding cookies are found in the ePrivacy Directive (sometimes called the "Cookie Law"), which works alongside the GDPR. This directive was established before the GDPR and contains more specific provisions about cookies, including the requirement for websites to obtain user consent before storing cookies on their devices.
Third-party cookies
The next shock came in 2020 when Google announced plans to phase out third-party cookies in Chrome. This announcement sent waves through the digital marketing world, especially since other browsers like Safari and Firefox had already started restricting tracking capabilities. With over 40% of internet users also employing ad-blocking technology, the writing was on the wall: the era of unrestricted tracking was coming to an end.