The European Union (EU) adopted the GDPR in 2018. Although this is mostly for European countries, all sites that are available there should also comply with it. I won't go into the technical aspects of this regulation, but essentially, it ensures that users grant permission for others to access their personal data and are free to revoke this access, and therefore have them destroy this information at any time they like. This can impact applications in many ways, even forcing the adoption of specific requirements. At the very least, for all applications that use cookies for tracking personal information, they are forced to warn users and get their consent.
Required cookies
The default ASP.NET Core templates, as of version 3.x, include support for getting user's approval for using cookies. The CookieOptions class, used to supply cookie data such as expiration, now has...