[anoncake]

And the GDPR is not a directive.

[lmkg]

But cookie banners must also adhere to the ePrivacy Directive, which is a directive (as the name implies).