Something that can be dismissed indicating we use cookies to operate the site. This can also double as a notification for changes to the privacy policy and a link to such.
Reading through different articles and websites
e.g.
https://www.itgovernance.eu/blog/en/how-the-gdpr-affects-cookie-policies
https://www.cookiebot.com/en/gdpr-cookies
I believe we need more than just a pop up and the example in cookiebot covers what is necessary. The user must be able to opt-in and out in the notification. The user's choice must be persisted in the system too.