Because the new law says the user can’t be assumed to consent, unless the specific parts of the contract are stated more explicitly, are opt-in rather than opt-out, etc. The old ToS become invalid and unenforceable.

If they stop collecting data for those users (at least until they opt in to an updated ToS) that would work around the problem.