Or perhaps the language the government is using is a bit broad. Thus people are removing external Google font calls to cover their bases and not get fined?
You can read that damned law here: https://www.iitr.us/eudatap.html
There is no paragraph, which says, that google-fonts are forbidden. The experts says: Google-Fonts saves and collects IP-adresses, this is tracking.
About tracking says the DSGVO:
6. The legal basis for the processing of personal data by telemedia service providers is therefore only Article 6 (1), in particular (a), (b) and (f) GDPR. In addition, the general principles of Article 5 (1) GDPR, as well as the specific requirements for From Article 25 (2) GDPR.
7. Processing operations which are strictly necessary for the provider to provide the service requested by the data subjects may, if appropriate, be based on Article 6 (1) (b) or (f) of the GDPR.
8. Whether and to what extent other processing activities are lawful must be assessed by weighing interests on a case-by-case basis on the basis of Article 6 (1) (f) of the GDPR.
"9. In any case, prior consent must be given in the use of tracking mechanisms that make the behavior of data subjects on the internet comprehensible and in the compilation of user profiles, which means that informed consent in the sense of DSGVO, in form an explanation or other clearly confirming action must be obtained prior to processing, ie, for example, before cookies are placed or information stored on the user's device is collected. "
This view is consistent with the European understanding of Article 5 (3) of the ePrivacy Directive. In the majority of EU Member States, the ePrivacy Directive has been fully transposed into national law, or supervisors are already calling for an "opt-in" in line with Article 5 (3) of the Directive.
Since the references in the ePrivacy Directive to the Data Protection Directive pursuant to Article 94 (2) GDPR are to be considered as references to the GDPR, consent must i. P. D. ePrivacy Directive Europe-wide from 25.05.2018 meet the requirements for consent under the DSGVO. In order to ensure a uniform enforcement of European data protection law in the future, it must be ensured that those responsible in Germany also implement these data protection requirements.
This paper will be updated in the light of developments at European level.
It is not easy, fact is loyers started dutiable dissuasions ....