Nope, the law allows cookie that are necessary for a functionnality that allows the communication or is asked by the user. For exemple, as I said in another po

Nope, the law allows cookie that are necessary for a functionnality that allows the communication or is asked by the user. For exemple, as I said in another post, is explicitely allowed: * Cookies for login/session * Cookies for shopping carts * Cookies for interface personnalisation (language, etc.) * Cookies for load balancing * Cookies to retain user choice regarding cookies And quite a few other. So really you can run your website without consent notice if you care enough. One grey area is analytics, it varies amongst european DPAs. That I know of: * In France it is allowed if you respect a few rules (no cross-processing, no localisation, etc..) * In the UK, it is not per say allowed, but the ICO said they would not prosecute on those grounds.