As I understand it PECR does require affirmative consent to use cookies specifically. Often same mechanism is used for data processing bases for GDPR as for PECR consent.

https://ico.org.uk/for-organisations/guide-to-pecr/cookies-a...