Threat of legal action from the UK for breach of PECR cookie tracking

I've just started working at a company in a new marketing role, and we have received an email from a user in the UK citing GDPR and PECR, claiming that they should be awarded damages for unlawful tracking using cookies.

We have Hubspot, LinkedIn and Google Analytics tracking set up on the website, and there has been no opt-in plugin for cookies added to the website yet - this is one of the first tasks on my list to set …

action breach cookie cookie tracking legal privacy threat tracking uk