Confusion reigned before the Cookie Law went into effect in 2012. That’s not the case with GDPR: Firms are already getting on track. For example, author Bob Wootton received a seven-page questionnaire from his financial advisor asking permissions to use and store his data.