The EU regulation enforced _asking users for permission before being tracked_ for non legitimate interests. There is new regulation in progress that mandates opting out to be as easy as opting in ("the Good").
None of this would be a problem if companies only used cookies for legitimate purposes.
Yep, i'm just not sure if it was general incompetence or just plain lobbying by third parties to do so.