The article omits the really obvious solution: don't use all these cookies on your site. Many of us use google analytics for convenience but in reality there's really no reason for it on most sites. Basic login or technical protection measures are all perfectly fine - so storing an IP to make sure you're not getting ddosed is not an issue.
This law is not aimed at the average homebrew website or restaurant menu page - it's for the big abusers, like Google.