Yes, cookies used to identify individuals are considered personal data (e.g., a cookie ID). Many regulations, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR), control how businesses use cookies and other personal information. Cookies that are not considered personal data are still subject to requirements set out in the ePrivacy Directive that governs the use of cookies more generally.