Research on governmental websites in Sweden show many of them accidentally send IP addresses to Google Analytics, breaking GDPR.

Often due because of a typos in the option string 'anonymize_ip'