In reply to Daan van den Bergh.

Dann thank you for providing the article, I have read it in its entirety, however, I think the rules should apply to everyone, that’s why you can’t legislate lightly.

It is very difficult to know which resources you can have locally and not use from third parties, for example, a JS from an external library, actually you can have it hosted locally, an image compression service, you can actually download the compressed image and host it locally.

Now, an external font is served from a CDN, does that mean that if I use GOOGLE CLOUD CDN to serve all my resources I’m in compliance with policy but if I use a google font (hosted on their CDN) I am not in complying?

If I call Jquery from Cloudflare then I don’t violate GDPR.
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
But if I call it from Google yes?
https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

In case I’m not violating it, isn’t a font the same as a JS in that they are both static resources?

I think there is still a lot of ambiguity