The Original Cookie specification from 1997 was GDPR compliant (via lobste.rs).

The original cookie specification did not allow third-party cookies. All the problems that we have today could be solved back then if the industry had just followed the original specification.