Re: @Oliver
> can't be bothered to look for the original
It's often a good idea...
> the cookies which you should warn about are the so called session tracking cookies
This is not sufficient, per the legislation.
Regulation 6 says this :-
"a person shall not store or gain access to information stored, in the
terminal equipment of a subscriber or user unless the requirements of
paragraph (2) are met.
(2) The requirements are that the subscriber or user of that terminal equipment-
(a) is provided with clear and comprehensive information about the purposes of
the storage of, or access to, that information; and
(b) has given his or her consent.
"
Note that this covers all cookies, not just session cookies.
Whether or not any of this will actually be enforced is another matter of course. And the ICO's "implied consent" defence essentially nullifies any possible prosecution unless a site is truly taking the piss, and its users complain.
Vic.