I've not seen a decent discussion of this anywhere - the BBC site says "shopping baskets are exempt" but what about session cookies? What about font-size preferences or logins?
I've asked my MP (in the UK) to look into it...