In January, 2022, a German Court Fined a Website Owner for Violating the GDPR by Using Google-Hosted Fonts. The fine was 100 Euros, but could be much higher, based on German law. The lesson here is to self-host all content (including Google Fonts), and/or stop using Google Fonts.
> Google's EU user consent policy > > When using Google products that incorporate this policy, certain disclosures must be given to and consents obtained from end users in the European Union where EU data protection law requires such disclosures and consents. > > For end users in the European Union: > > You must ... Read more