To my understanding the case with GDPR is that you’ll need user approval for personalized AdSense ads – if you configure AdSense that no personalized ads are displayed it should be ok just with the normal cookie consent. At least that is my understanding.