From Cookies to Code: why AI regulation needs a Privacy Sandbox approach | ATDb