Someone in EU should try to make a complaint to the local authority who is enforcing ePrivacy Directive regarding anti cheats in general. Despite what people think ePD isn't limited to cookies and rather also applies all data read or stored in "terminal equipment" via use of electronic communications networks. I would say anti cheat should usually qualify. If they want to do it without consent then they need to show that it's strictly necessary for the service user specifically requested (and that applies for each piece of data written/read, including the OS information).

There's good argument that anti cheat itself would need to be consent based. If you don't accept then you simply don't get placed in games with users who have it enabled.