I have seen a few US sites that do not seem to offer proper cookie control e.g. Boston Consulting Group, where they want you to change your browser settings rather than allowing you to set it on a per site basis.
This does not seem in the spirit of EU Law and I am guessing it is not legal.
Is it?