Since all the clients I maintain these days are smaller, American-facing companies, I've never been asked to add this popup and I've never suggested it because none does business in the EU. No third party tracking cookies are involved, but some of my platforms do quite a bit of fingerprinting and store hashes of those fingerprints in cookies or local storage, and try to match those later with fingerprints polled for device authentication. This is perhaps less "obvious" a need for a site's internal purposes. None of it is shared, but I had assumed if I were to build anything like that EU-facing that the notice would be required.