It's a legal requirement only if you use cookies for nefarious nonsense like ad tracking. You're allowed to store login cookies etc just fine with no need for a popup and similar purposes.
The MBAs who are drafting these requirements don't know that. They're still confused on how double chocolate chunk is making its way into a web browser. They'll always just prioritize marketing, so put the banners and who cares.
Hey Jdietrich, I posted a while ago about being banned of Airbnb and you suggested to use GDPR to make a request to the DPO. It worked, the account is "unbanned". Many thanks for you suggestion and vive le GDPR (writing you here because my original post was flagged so no more comment can be added).
It's a legal requirement in the EU.