The maximum fine for cookie consent failures jumped from £500,000 to £17.5 million under the Data (Use and Access) Act. Three new cookie categories are now exempt from consent, but the stakes for getting it wrong are much higher. Here is what UK businesses need to check.