I have just had an email discussion with a client who has referenced the following document: [ico.gov.uk...]
It seems that an EU Directive requires these changes and the interpretation is as follows:
The new requirement is essentially that cookies can only be placed on machines where the user or subscriber has given their consent. 6 (1) Subject to paragraph (4), a person shall not store or gain access to information stored, in the terminal equipment of a subscriber or user unless the requirements of paragraph (2) are met. (2) The requirements are that the subscriber or user of that terminal equipment-- (a) is provided with clear and comprehensive information about the purposes of the storage of, or access to, that information; and (b) has given his or her consent.
The client wants us to let him know the impact on his site of this law.
And I thought: well, for starters, you'll have to turn off Google Analytics until you have asked permission...
Any thoughts as to how much of a utter nightmare this could turn into?