I've never heard of anyone getting fined either. A plain privacy policy link in the footer should be sufficient.
"Consent must involve some form of communication where individuals knowingly indicate their acceptance"
A privacy policy link at the bottom would not suffice.
[1] https://en.wikipedia.org/wiki/HTTP_cookie#EU_cookie_directiv...