I think the assumption is that you don't do any tracking by default and then the first cookie you set is to allow you to set other cookies in the future.
The ICO would have website owners pop up a box to new users asking them to give consent to using cookies.
The ICO would have website owners pop up a box to new users asking them to give consent to using cookies.