It should also be noted that a directive isn’t an “EU Law”, since it cannot be enforced directly (as opposed to a EU regulation such as the GDPR). It’s basically a framework that all EU member states have agreed they would each pass as a Law in their own jurisdiction (which explains the first quote in the article beginning by “Member States shall ensure …”).
Since eprivacy is “just” a directive, each member state has since passed their own implementing Law that have the same basis but can vary in their specifics, so rules on tracking and cookies aren’t the exact same in each member state.
Thank you for that, my brain was stuck on “Chupacabra”