Some online resources suggest that since GDPR states that consent must be explicit and revocable, that this also applies to cookies, rendering the "cookie banner" insufficient.
Many sites use 3rd party libraries which will store cookies for tracking, such as Google Analytics. Additionally, other 3rd party libraries, such as AddThis, store tracking cookies which cannot be disabled. To prevent the storage of these cookies, AddThis and some other functionality would need to not be included on the site at all if the user hadn't opted in, which could affect functionality. It may also require a fairly significant investment of time.
However, I don't see anything in the actually GDPR that relates to cookies in this sense. The application of GDPR to cookies seems to be based on independent interpretation.
Does GDPR actually require a change to cookie banner functionality, or are current implementations sufficient?