As I understand it, the former is implementing some international agreement where EU member states chose to use the EU as the mechanism to implement the agreement. The later seems to be the EU gold plating that (e.g. limiting anonymous electronic payments to €50).