How the 2 sets of Directives and Regulations interact is a full and complex subject. My point was that when I see an "expert" making a number of statements but with a large factual error in the basic explanation I am not inclined to look at those statements with much belief.
GDPR makes only one short mention of cookies, and that is to clarify that where cookies may contain private data OR may be used in any way that allows an individual to be identified, then this is private data as covered by GDPR.
Biting the hand that feeds IT
