What are the legal requirements for using popups in different regions (e.g., GDPR)?

When you use popups, especially for cookies, the rules change depending on where your users live. In the EU, the GDPR requires you to get clear, informed, and active consent before placing non-essential cookies. That means your popup must be easy to understand, give users full control over their choices, and let them opt-out anytime. In California, CPRA and CCPA focus on transparency and letting users opt out of data sharing.