It's two different directives:

- ePrivacy Directive which is about local storage

- GDPR which is about information processing