The european law as far as i understand it takes issue with google fonts because the data travels out of the EU to the USA since googles servers are outside of the EU and gdpr cant be enforced.

Bunnyfonts are hosted in the eu for this reason.