GDPR has largely been ignored on the webmaster-side, so I don't believe that's a large factor. Especially since you can pretty much do whatever you did before, you just need to mention it in your privacy notice.
I've yet to see actual cookie consent banners on a meaningful scale. So far, cookie notices have been rolled out, so you'll get a sentence or two and an OK button. There's usually no option to deny, and even those that do add it, don't do so in a way that matters: if you click No, cookies for analytics, ads etc have already been set.
Then there's this whole topic of third party cookies. Do you only need to inform & gather consent for cookies you set, or also those that services set that you embed in your site?
