Share on LinkedInShare on LinkedIn

ARTICLE · 13 FEBRUARY 2026

Market Intelligence Thought Leadership Award Winner

CJEU's Russmedia Decision Expands Platform Controller Duties Under GDPR

Greenberg Traurig
Greenberg Traurig
Contributor
Greenberg Traurig

Greenberg Traurig

Greenberg Traurig, LLP has approximately 3,200 lawyers across 51 locations in the United States,...

View firm profile
Explore more from Greenberg Traurig

The decision does not introduce fundamentally new principles. Rather, it consistently combines elements that are well established in the Court's case law...

GermanyPrivacy

Read in German.

With its Russmedia judgment (C-492/23, Grand Chamber, 2 December 2025), the Court of Justice of the European Union (CJEU or Court) fundamentally reshapes how online marketplaces and other platforms hosting user-generated content must approach data protection compliance.

The decision does not introduce fundamentally new principles. Rather, it consistently combines elements that are well established in the Court's case law: a broad and functional concept of controllership under the EU General Data Protection Regulation (GDPR), and a strict separation between data protection obligations and intermediary liability regimes. However, what makes this judgment particularly consequential is the way in which these principles are brought together and operationalized through a detailed catalogue of preventive obligations. This combination may prove challenging to implement for certain platform providers, particularly in high-volume or small-to-medium

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from