Believe it or not, yes it is.
And in case you're still thinking "my site is okay, because I don't use cookies", be aware that Google Analytics cookies are covered by the EU Cookie law and so legally, since they are not essential for the functionality of your site, you have a responsibility to tell people that you are using them and give visitors the option to leave your site before a cookie is issued.
I'm not aware of anyone having been prosecuted for contraventions of the cookie law, as yet, but of course that doesn't mean it will never happen.
As you can imagine, the likely recipients of prosecution would probably be companies who are deliberately using cookies in a dishonest way in order to gather information about users that those users would not have volunteered.
One can only assume that the likely course of action in the case of an average website - ie. one that uses cookies in a harmless but non-compliant way - would be a warning to the website owners that they must become compliant immediately or face prosecution.
But of course, a contravention is a contravention and I imagine the authorities have to take it seriously when any complaint is levelled against a company that is not compliant.
Quick and easy options to make the whole thing go away include the free Cookie Control code or Google's own Cookie Choices code. Either can probably be configured and set up on your site in under half an hour.
