The UK's cookie rules have changed. What the ICO expects from a cookie banner, and why treating consent as a design problem builds trust from the first click.