Consent must be requested before activating non-essential scripts, not after. A banner that loads everything and then asks permission is not compliant.
The notice must be written in clear language: what you collect, why, how long you keep it, how to delete it. No 2018 PDFs.
Technical cookies without consent, marketing only after acceptance, preference log tracked. Three rules that cover most cases.