The GDPR doesn't directly mandate cookie banners though. It wants consent from users prior to processing their data.

Also, the browser flag that indicates no consent already exists: https://globalprivacycontrol.org/faq