ePrivacy Directive vs. GDPR: What Engineering Teams Need to Code For
A developer adds a tracking tag through Google Tag Manager and ships it. The tag does two things almost simultaneously: it touches the visitor's browser—sets a cookie or reads one back—and it starts sending data about that person to a third party. Those actions answer to different laws, and treating them as a single "GDPR Cookie Consent" problem is how gaps get built into a site without anyone noticing.