Here is how my company's compliance lawyers explained it to me. There aren't really EU-wide laws. There are "directives", and each individual country then passes laws that aim to meet the goals of that directive. To make sure you're compliant with all of them, it's easiest to err on risk-avoidant side, even though it is all deeply stupid.