References:
A.European e-Privacy Directive (2002/58/EC)
B.The Privacy and Electronic Communications (EC Directive) Regulations 2003

Reference A requires that that users should be “offered the opportunity to refuse” a cookie. The EU directive was brought into UK law by Reference B. Out-law.com site explains the law well, and to quote it, the regulations require that the use of cookies or other tracking devices are clearly indicated and that people are given the opportunity to reject them.

I've had not had to use cookies up to now - but I am developing a site where session cookies would be handy. More than that, I belong to a club with a popular site, which uses cookies, but which has no mention of the use of them.

One major supermarket copes by a small privacy policy link which leads to a fairly good expalanation of cookies and what they are for, instructions to go to the browser help link if the visitor wants to turn them off - and a warning that switching off cookies will impair service.

What's the current consensus view on how to advise visitors on cookies? Is the supermarket's approach OK?