[Deputy Commissioner Dave] Smith said fines were unlikely for cookies, as they wouldn't meet the requirements for being "substantially distressing" to individuals. "We do not rule that out but it's most unlikely that breaches of cookie requirements meet the requirement for monetary penalty," he said. "In the area of cookies, it's quite hard to satisfy the test for a fine."

However, there are many sites asked on CMS like solutions - Joomla, ExpressionEngine, WebYep. All of these may drop cookies in one form or another. However, how would you convince the writers of these to comply with the rule? Some may not care, some may. Last time I looked, the Joomla forums had a thread about it with little conclusion, and certainly nothing from the development team.

Same with Google Analytics, but IIRC they were making a push to make an exception

The problem is also compounded by all those Tweet/FaceBook/LInkedIn/Digg buttons which set cookies as well. Those buttons are generally iFrames which are written in by JavaScript. Obviously, to comply, those buttons would need to either not be shown or only be shown when someone agrees to cookies being set. For bonus points, you’d only do this if the IP Address of the visitor is from an EU country.