Within the European Union we are requested by law (General Data Protection Regulation & ePrivacy directive) to provide information to the user of any online application of the cookies that are used, and reveive consent when using not strictly necessary cookies (see fill complience text below).
All sites and application in ArcGIS Online and Portal for ArcGIS should include this possibility: show cookies used + ask consent for not strictly necessary cookies.
Most important is Hubs when combined with google analytics, where you definately need consent by the user for placing tracking cookies.
=============================
Cookie compliance
To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must:
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.