There is, it's called the General Data Protection Regulations. Its purpose is to protect consumers from companies that surveil and track without your knowledge and permission. You should read up on it as cookies are just a tiny paragraph.