Author here. What’s new is the ICO has changed their guidance: they had explicitly stated analytics was acceptable in the past. The law itself hasn’t changed, but what most people thought was compliant is now unambiguously not.