The eDirective states that the browser and device information (like the URL) is private data and you need a permission to access it for non-essential purposes such as analytics. This is why Simple Analytics also needs a cookie banner, contrast to what their marketing says.
I'm not quite up to date, was it passed since 2018? I remember it being delayed quite a bit.
My Google-Fu has proved insufficient.
EU is still working on a new version of the directive. I heard they have been doing it for three years now.