The Cookie law started as a European Union directive in May 2011. This was an update to the Privacy and Electronic Communications Regulations in the UK.
The law states that website owners need to let the users know they use cookies to retrieve their information. Also, they need to give their visitors a chance to refuse the use of cookies that may interfere with their online privacy.