Under that premise, any request to an external static resource like js,css,jpg or third party API would be exposing the IP and violating GDPR, Also using a CDN would be exposing the visitor's IP to a third party