The law is pretty simple: If you track users, or transmit information to third parties which could track the user, you have to get the user to opt-in.
The original intention was to get rid of Facebook’s shadow profiles, which it did – in the EU, websites don’t embed Facebook’s like button anymore, but have a two-click solution, where you have to click it, then it’s actually loaded, then you can like.
That alone is worth such a law.
But according to this website: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm Cookies clearly exempt from consent according to the EU advisory body on data protection- WP29pdf include: (...) third‑party social plug‑in content‑sharing cookies, for logged‑in members of a social network.
So, I think what you say about Facebook is not true.
I was talking about non-logged in users. The shadow profiles.
> The law is not simple. 100 words sentences of law jargon are not simple. Many, many pages of such sentences is the opposite of simple.
The German version of the law is just as simple to read as any newspaper or book you read in German high school, so at least I haven't had an issue before.
Of course, websites that don't track their users are exempt: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm
I guess the EU didn't expect websites to cling to tracking cookies like their lives depended on them.