A European privacy law that requires websites to get clear permission before collecting personal data about visitors. It's the main reason so many sites show a cookie consent banner.