[thedaniel]

They aren't, exactly. In one of the articles linked from this one, it says

> It’s easy to confuse the ePrivacy regulation with the General Data Protection Regulation, a broader law addressing consumer data privacy that has dominated the market’s attention lately. The core difference is that cookie use is central to the ePrivacy regulation, which is why it’s known as the “cookie law.” Businesses in Europe must get explicit consent to use cookies and provide clear opt-outs to users under the proposed new law. Meanwhile, the GDPR regulates the general handling of personal data.

[x0x0]

and personal data includes cookies :)

So yeah, confusing all around.