Pay attention to the GDPR plugins. You have to collect consent from users, but more important is to be able to demonstrate you collected that consent. I saw a lot of websites that use just an announcement they use cookies and so on. I would recommend having a look at the cookie hub plugin. Good support, multilingual and efficient. Of course, you will have to pay for it. Good luck!