Only Denmark, Estonia and the U.K. have so far notified measures to implement the revisions to the ePrivacy Directive. The new law aims to give Internet users more information about the data stored about them. The so-called “Cookies Directive” requires companies to obtain “explicit consent” from Web users before storing cookies. The only exception is when they are necessary for a service requested by the user, for example, when a user clicks “add to basket” button to buy goods from a website.”]
Source: https://www.csoonline.com/article/2128519/eu-countries-ignore-new-law-on-internet-privacy.html