The Court of Justice of the European Union (CJEU) ruled in a judgment (Case C‑492/23) on Tuesday 2 December that the operator of an e-commerce website is in fact liable for the processing of personal data contained in advertisements published on its platform, even if it is not itself the source of the data.
The case in question involved a Romanian woman whose image and personal data had been used without her consent in a sexual advertisement placed online by one of the users of the...