I know GDPR might be enforced in EU, but what about your local variations? (And what about US?)
Most commonly seen are cookies. I believe it should not be only Accept or Decline, but detailed with fine tuning. (But how fine-tuned should it be?)
Another thought is, personalizations (and recommendations) should be able to be turned off, including search engines.