It's the fateful collision between ePD and GDPR criteria for consent, taken in a rather strict sense. For the milder end they even have some "you shouldn't do that but we might not look too closely nudge-nudge wink-wink" language in there but that's hardly helpful.
♥ 1