{"id":29994,"date":"2025-12-03T11:32:24","date_gmt":"2025-12-03T09:32:24","guid":{"rendered":"https:\/\/kpw.law\/?p=29994"},"modified":"2026-03-12T23:02:10","modified_gmt":"2026-03-12T21:02:10","slug":"platforms-are-liable-for-sensitive-data-in-user-ads","status":"publish","type":"post","link":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/","title":{"rendered":"Platforms are liable for sensitive data in user ads"},"content":{"rendered":"\n<div class=\"wp-block-group alignfull v4-pattern-hero v4-pattern-hero--post is-style-background-blend is-style-arrow has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-cover alignfull v4-pattern-hero__cover\" style=\"padding-top:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--80);min-height:75vh;aspect-ratio:unset;\"><img data-dominant-color=\"3697a8\" data-has-transparency=\"false\" style=\"--dominant-color: #3697a8;\" loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" sizes=\"auto, 100vw\" class=\"wp-block-cover__image-background wp-image-29992 size-large not-transparent\" alt=\"Plattformen haften f\u00fcr sensible Daten in Nutzeranzeigen, Datenschutz, DSGVO, Rechtsanwalt\" src=\"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg\" data-object-fit=\"cover\" srcset=\"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg 1024w, https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-300x169.jpg 300w, https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-768x432.jpg 768w, https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1536x864.jpg 1536w, https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-2048x1152.jpg 2048w\" \/><span aria-hidden=\"true\" class=\"wp-block-cover__background has-base-background-color has-background-dim-0 has-background-dim\"><\/span><div class=\"wp-block-cover__inner-container has-global-padding is-layout-constrained wp-block-cover-is-layout-constrained\">\n<div style=\"height:5em\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-1d4b5d69 wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--80);padding-top:var(--wp--preset--spacing--60)\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-19e250f3 wp-block-group-is-layout-constrained\">\r\n<h1 id=\"multirow-headline-block_c6d3c8068ee673a6e38bc6614c123e32\" class=\"wp-block-visual4-multirow-headline\">\r\n    <div class=\"wp-block-visual4-multirow-headline\">\n\n<p class=\"has-gigantic-font-size\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">Platforms,<\/p>\n\n\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">are responsible for ads with<\/p>\n\n\n\n<p class=\"has-contrast-color has-text-color has-link-color has-huge-font-size wp-elements-0d88831fa9d9861a723a17a3e81401ae\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\"><span class=\"v4-marker-highlight-background\">Sensitive data<\/span><span class=\"v4-marker-highlight-background\">.<\/span><\/p>\n\n<\/div> \r\n<\/h1>\n\n\n<div class=\"wp-block-group has-small-font-size is-nowrap is-layout-flex wp-container-core-group-is-layout-76c96157 wp-block-group-is-layout-flex\" style=\"margin-top:var(--wp--preset--spacing--20);margin-bottom:0;padding-top:0;padding-bottom:0;font-style:italic;font-weight:300;text-transform:uppercase\"><div style=\"font-style:italic;font-weight:300;text-transform:uppercase;\" class=\"wp-block-post-date has-small-font-size\"><time datetime=\"2025-12-03T11:32:24+02:00\">3. December 2025<\/time><\/div>\n\n\n<p>from<\/p>\n\n\n<div style=\"font-style:italic;font-weight:600;\" class=\"wp-block-post-author-name\">Clemens Pfitzer<\/div><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-c93ec0be wp-block-group-is-layout-constrained\">\n<p><strong>How much responsibility do online classifieds portals bear when strangers upload intimate pictures without authorization? And will operators have to check in future whether the person advertising is actually the person in the photos? <\/strong><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n\n<h2 class=\"wp-block-heading\" id=\"h-wenn-eine-anzeige-zum-kontrollverlust-fuhrt\">When a complaint leads to loss of control<\/h2>\n\n<p>What begins as a harmless classifieds platform can quickly develop into a drastic example of how privacy and data protection can collide, as the Russmedia case shows. An unknown person uploads a fake ad on publik24.ro in which a woman is presented as a provider of sexual services with photos and her real telephone number &#8211; without her knowledge and without her consent. The ad spreads rapidly as it is automatically copied from other advertising sites. The woman concerned thus loses control of her own data. Russmedia deletes the ad within an hour of being notified. At this point, however, it already has a life of its own on other portals.     <\/p>\n\n<p>The victim is claiming non-material damages. A court in Romania awarded her 7,000 euros, but the court of appeal overturned the ruling. According to the argument, the operator was only a host provider and therefore privileged. The Curtea de Apel Cluj finally appealed to the Court of Justice of the European Union &#8211; and the ECJ took the opportunity to fundamentally clarify the role of platforms in data protection law.   <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-dsgvo-und-e-commerce-regime-kollidieren-aber-nicht-auf-augenhohe\">GDPR and e-commerce regime collide &#8211; but not at eye level<\/h2>\n\n<p>The case involves two areas of regulation that constantly come into conflict in everyday digital life. The <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/DE\/ALL\/?uri=celex:32000L0031\">E-Commerce Directive<\/a> relieves providers who host third-party content of monitoring obligations. The <a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj?locale=de\">GDPR <\/a>, on the other hand, relies on comprehensive responsibility, especially when sensitive data is involved.  <\/p>\n\n<p>So while the E-Commerce Directive states: &#8220;You don&#8217;t have to monitor everything&#8221;, the GDPR stipulates: &#8220;However, as soon as you process personal data for your own purposes, you bear comprehensive responsibility.&#8221; This is precisely the central conflict that the ECJ must resolve.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-eugh-plattformen-sind-verantwortliche-und-zwar-mit-weitreichenden-pflichten\">ECJ: Platforms are responsible parties &#8211; with far-reaching obligations<\/h2>\n\n<p>In its <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf?text=&amp;docid=306764&amp;pageIndex=0&amp;doclang=FR&amp;mode=req&amp;dir=&amp;occ=first&amp;part=1&amp;cid=15301997\">judgment of 02.12.2025 &#8211; C-492\/23<\/a>, the European Court of Justice clearly states that the<\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-verantwortlichkeit-trotz-fremder-inhalte\">Responsibility despite third-party content<\/h3>\n\n<p>The ECJ clarifies that Russmedia is not just a technical repository for content. The company structures, categorizes, monetizes and uses ads itself, for example through the ability to copy, share or modify content. These own purposes are decisive: the platform determines the purposes and essential means of data processing and thus becomes the controller within the meaning of the General Data Protection Regulation.  <\/p>\n\n<p>The clarity of the court is remarkable: the mere fact that a user posts the ad does not exonerate the operator. Both can be controllers at the same time. The GDPR does not want platforms to hide behind their technical role.  <\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-umgang-mit-sensiblen-daten-ein-rote-lampe-moment\">Handling sensitive data: A &#8220;red light&#8221; moment<\/h3>\n\n<p>The case concerns data on sexuality, which is a particularly protected category. The ECJ clarifies that even if the information is untrue, its sensitive nature remains. Sensitive data may not be processed unless an exception applies. The most important exception is explicit consent, which was clearly not given in this case.   <\/p>\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n<p>This results in an obligation that will shape future platform practice. Operators must check whether an ad contains sensitive data before publication. If so, they may only publish it if the person concerned is identical to the account holder or has given their express consent. The ECJ therefore requires risk management that goes beyond today&#8217;s &#8220;notice and take down&#8221;. For platforms, this means that they must develop processes that recognize and prevent risks in advance instead of only reacting after the fact.    <\/p>\n\n<div class=\"wp-block-group v4-pattern-general-quote-box has-kpw-blue-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\" style=\"padding-right:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p>Before publishing advertisements, the operator of an online marketplace is obliged to identify those <br \/>that contain sensitive data, to check whether the person advertising is identical to the data subject and to refuse publication unless explicit consent or another exception under Article 9(2) GDPR applies.<\/p>\n<\/blockquote>\n<\/div>\n\n<h3 class=\"wp-block-heading\" id=\"h-sicherheitsmassnahmen-schutz-auch-vor-weiterverbreitung\">Security measures: Protection also against further distribution<\/h3>\n\n<p>The ECJ&#8217;s statement that platform operators must take technical and organizational measures to make the copying and scraping of sensitive ads more difficult is particularly explosive. For the court, the loss of control by those affected in the original case is a direct expression of insufficient security. Quickly deleting the ad alone is not enough; the platform must also prevent third parties from automatically copying content.  <\/p>\n\n<div class=\"wp-block-group v4-pattern-general-quote-box has-kpw-blue-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\" style=\"padding-right:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p>The operator of an online marketplace must implement technical and organizational security measures to prevent ads containing sensitive data from being copied and unlawfully transferred to other websites.<\/p>\n<\/blockquote>\n<\/div>\n\n<p>This does not mean that platforms should control the internet, but they must create an &#8220;appropriate level of security&#8221; that at least makes it more difficult for bots, scraping mechanisms and other automated processes to take over content.<\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-provider-privileg-ja-aber-nicht-gegen-die-dsgvo\">Provider privilege? Yes, but not against the GDPR. <\/h3>\n\n<p>The distinction from the E-Commerce Directive is also crucial: the liability privileges do not apply to data protection violations. The ECJ emphasizes that the GDPR stands independently. Anyone who processes personal data is fully subject to <a href=\"https:\/\/kpw.law\/rechtsgebiet\/datenschutzrecht\/\">data protection law<\/a> &#8211; regardless of whether they are also privileged as a host provider.  <\/p>\n\n<p>For platforms, this means that they cannot escape responsibility by claiming that they are only a &#8220;neutral intermediary&#8221;.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-was-plattformen-jetzt-beachten-mussen\">What platforms need to consider now<\/h2>\n\n<p>This ruling is a wake-up call for operators of marketplaces, classified ad portals and similar services. Many business models are based on the assumption that they are not responsible for the content posted by users. However, this assumption is no longer valid under data protection law. Obligations that now take center stage are:   <\/p>\n\n<ul class=\"wp-block-list is-style-arrow\">\n<li><strong>Check your own responsibility<\/strong><br \/> Wherever platforms structure, utilize, display or convert ads into reach, they themselves become responsible.<\/li>\n\n\n\n<li><strong>Recognize sensitive data before publication<\/strong><br \/>This can be done using keyword filters, AI-based recognition or manual checks &#8211; what is important is a verifiable, risk-oriented procedure.<\/li>\n\n\n\n<li><strong>Identity verification for high-risk ads<\/strong><br \/>A &#8220;leap of faith&#8221; will no longer suffice for sensitive categories. There will have to be models that verify identity or authorization. <\/li>\n\n\n\n<li><strong>Protection against scraping and unauthorized disclosure<\/strong><br \/>Bot protection, API limits, watermarking and partner control: measures that were previously considered &#8220;nice to have&#8221; are becoming mandatory compliance.<\/li>\n\n\n\n<li><strong>Documentation and accountability<\/strong><br \/>Platforms must be able to demonstrate how they have implemented the obligations under Article 5(2) GDPR in terms of technology and organization.<\/li>\n<\/ul>\n\n<p>Overall, the role of the platform operator is thus evolving away from being a passive host and towards being an active player in terms of data protection law.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-fazit\">Conclusion<\/h2>\n\n<div class=\"wp-block-columns v4-pattern-text-copy-half-col is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>The ECJ has drawn a clear line here. Anyone who operates a platform is not just a technical service provider, but also a data protection actor &#8211; especially when sensitive data is involved.   <\/p>\n\n\n\n<p>The Court requires proactive, intelligent risk management before publication and not only after complaints. At the same time, it makes it clear that the provider privileges of the E-Commerce Directive do not help in this case.   <\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<\/div>\n<\/div>\n\n<div class=\"wp-block-group alignwide has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--80);margin-bottom:var(--wp--preset--spacing--80)\">\n<div style=\"height:50px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-group alignwide v4-pattern-cta-box has-secondary-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-a7c0d175 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0\">\n<div class=\"wp-block-columns alignwide are-vertically-aligned-top v4-pattern-cta-box__columns is-layout-flex wp-container-core-columns-is-layout-ec2e7a44 wp-block-columns-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-column is-vertically-aligned-top v4-pattern-cta-box__columns-column is-layout-flow wp-container-core-column-is-layout-bce6ca70 wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--50);padding-bottom:0;flex-basis:60%\">\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-right is-layout-constrained wp-container-core-group-is-layout-5c12a1d1 wp-block-group-is-layout-constrained\">\r\n<div id=\"multirow-headline-block_547773376c73c8ed4bfdf6db6f53dacc\" class=\"wp-block-visual4-multirow-headline alignwide\">\r\n    <div class=\"wp-block-visual4-multirow-headline\">\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">We are happy to<\/p>\n\n\n\n<p class=\"has-text-align-left has-x-large-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:8%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:0.9;text-transform:uppercase\">advise you about<\/p>\n\n\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:0.9;text-transform:uppercase\">Data protection law!<\/p>\n\n<\/div> \r\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-5c3c14bb wp-block-group-is-layout-flex\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\">\r\n\r\n<div class=\"wp-block-visual4-contact-modal__button\">\r\n            \r\n        <div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\r\n            \r\n\r\n<div class=\"wp-block-button v4-contact-modal-button is-style-fill\" style=\"font-style:normal;font-weight:600\" data-form-id=\"8\"><a class=\"wp-block-button__link has-contrast-color has-base-background-color has-text-color has-background has-link-color wp-element-button\">Contact form<\/a><\/div>\r\n\r\n        <\/div>\r\n        \r\n    <\/div>\n\n\n<div class=\"wp-block-buttons is-style-mobile-only is-content-justification-left is-layout-flex wp-container-core-buttons-is-layout-fc4fd283 wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-arrow is-style-fill\"><a class=\"wp-block-button__link has-base-background-color has-background wp-element-button\" href=\"tel:4971141019030\" style=\"padding-right:var(--wp--preset--spacing--50);padding-left:var(--wp--preset--spacing--50);font-style:normal;font-weight:600\">Call now!<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top v4-pattern-cta-box__columns-column v4-pattern-cta-box__columns-column--image is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:40%\">\n<figure class=\"wp-block-image size-full v4-pattern-cta-box__columns-column__image\"><img decoding=\"async\" src=\"https:\/\/kpw.law\/wp-content\/themes\/kpw-law\/assets\/samples\/person-cropped.png\" alt=\"\" class=\"wp-image-23155\" \/><\/figure>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>When a complaint leads to loss of control What begins as a harmless classifieds platform can quickly develop into a drastic example of how privacy&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4904,1],"tags":[5460,5197,5201,5203,5975,5976],"thema":[],"rechtsgebiet":[],"produkt":[],"class_list":["post-29994","post","type-post","status-publish","format-standard","hentry","category-general","category-unkategorisiert","tag-gdpr","tag-internet-platform-en","tag-online-platform","tag-platform","tag-responsible-body","tag-sensitive-data"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Platforms are liable for sensitive data in user ads<\/title>\n<meta name=\"description\" content=\"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Platforms are liable for sensitive data in user ads\" \/>\n<meta property=\"og:description\" content=\"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/\" \/>\n<meta property=\"og:site_name\" content=\"KPW Rechtsanw\u00e4lte und Fachanw\u00e4lte\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-03T09:32:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-12T21:02:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Clemens Pfitzer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@clemenspfitzer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Clemens Pfitzer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/\"},\"author\":{\"name\":\"Clemens Pfitzer\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/person\\\/bb7a5be61de17c2c027e254e249214bd\"},\"headline\":\"Platforms are liable for sensitive data in user ads\",\"datePublished\":\"2025-12-03T09:32:24+00:00\",\"dateModified\":\"2026-03-12T21:02:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/\"},\"wordCount\":1163,\"publisher\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg\",\"keywords\":[\"GDPR\",\"Internet platform\",\"Online platform\",\"Platform\",\"Responsible body\",\"Sensitive data\"],\"articleSection\":[\"General\",\"Unkategorisiert\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/\",\"name\":\"Platforms are liable for sensitive data in user ads\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg\",\"datePublished\":\"2025-12-03T09:32:24+00:00\",\"dateModified\":\"2026-03-12T21:02:10+00:00\",\"description\":\"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg\",\"contentUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/platforms-are-liable-for-sensitive-data-in-user-ads\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/kpw.law\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Platforms are liable for sensitive data in user ads\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/\",\"name\":\"KPW PartmbB \u2013 Rechtsanw\u00e4lte und Fachanw\u00e4lte\",\"description\":\"Rechtsanw\u00e4lte f\u00fcr IP- und IT-Recht\",\"publisher\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\"},\"alternateName\":\"kpw.law\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kpw.law\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\",\"name\":\"KPW PartmbB\",\"alternateName\":\"KPW\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/KPW400x400.jpg\",\"contentUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/KPW400x400.jpg\",\"width\":400,\"height\":400,\"caption\":\"KPW PartmbB\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/kpw\"],\"description\":\"KPW ist eine auf IP und IT-Recht spezialisierte Kanzlei mit Rechts- und Fachanw\u00e4lten in Stuttgart. KPW ber\u00e4t Unternehmen in den Bereichen Wettbewerbsrecht, Markenrecht, Designrecht, Urheberrecht, IT-Recht, Patentrecht, Datenschutzrecht, E-Commerce und Know-How-Schutz.\",\"email\":\"info@kpw.law\",\"telephone\":\"+4971141019030\",\"legalName\":\"KPW PartmbB\",\"foundingDate\":\"2010-04-01\",\"vatID\":\"DE270757792\",\"duns\":\"341580247\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"1\",\"maxValue\":\"10\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/person\\\/bb7a5be61de17c2c027e254e249214bd\",\"name\":\"Clemens Pfitzer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"caption\":\"Clemens Pfitzer\"},\"description\":\"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz und Fachanwalt f\u00fcr IT-Recht, t\u00e4tig in den Bereichen Markenrecht, Wettbewerbsrecht, Urheberrecht, Designrecht, Know-How-Schutz, Patentrecht, IT-Recht, E-Commerce, Datenschutz\",\"sameAs\":[\"https:\\\/\\\/kpw.law\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/pfitzer\\\/\",\"https:\\\/\\\/x.com\\\/clemenspfitzer\"],\"gender\":\"m\u00e4nnlich\",\"knowsAbout\":[\"Markenrecht\",\"Wettbewerbsrecht\",\"Designrecht\",\"Urheberrecht\",\"E-Commerce\",\"Datenschutzrecht\",\"Patentrecht\",\"IT-Recht\",\"Softwarelizenzen\",\"Gesch\u00e4ftsgeheimnisse\"],\"knowsLanguage\":[\"Englisch\",\"Deutsch\"],\"jobTitle\":\"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz, Fachanwalt f\u00fcr IT-Recht\",\"worksFor\":\"KPW PartmbB\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Platforms are liable for sensitive data in user ads","description":"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/","og_locale":"en_US","og_type":"article","og_title":"Platforms are liable for sensitive data in user ads","og_description":"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.","og_url":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/","og_site_name":"KPW Rechtsanw\u00e4lte und Fachanw\u00e4lte","article_published_time":"2025-12-03T09:32:24+00:00","article_modified_time":"2026-03-12T21:02:10+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-scaled.jpg","type":"image\/jpeg"}],"author":"Clemens Pfitzer","twitter_card":"summary_large_image","twitter_creator":"@clemenspfitzer","twitter_misc":{"Written by":"Clemens Pfitzer","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#article","isPartOf":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/"},"author":{"name":"Clemens Pfitzer","@id":"https:\/\/kpw.law\/en\/#\/schema\/person\/bb7a5be61de17c2c027e254e249214bd"},"headline":"Platforms are liable for sensitive data in user ads","datePublished":"2025-12-03T09:32:24+00:00","dateModified":"2026-03-12T21:02:10+00:00","mainEntityOfPage":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/"},"wordCount":1163,"publisher":{"@id":"https:\/\/kpw.law\/en\/#organization"},"image":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg","keywords":["GDPR","Internet platform","Online platform","Platform","Responsible body","Sensitive data"],"articleSection":["General","Unkategorisiert"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/","url":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/","name":"Platforms are liable for sensitive data in user ads","isPartOf":{"@id":"https:\/\/kpw.law\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#primaryimage"},"image":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg","datePublished":"2025-12-03T09:32:24+00:00","dateModified":"2026-03-12T21:02:10+00:00","description":"Platforms are liable for sensitive data in user ads: ECJ requires prior verification, identity check and protection against further dissemination.","breadcrumb":{"@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#primaryimage","url":"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg","contentUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Plattformen-haften-fuer-sensible-Daten-in-Nutzeranzeigen-1024x576.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kpw.law\/en\/platforms-are-liable-for-sensitive-data-in-user-ads\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/kpw.law\/en\/"},{"@type":"ListItem","position":2,"name":"Platforms are liable for sensitive data in user ads"}]},{"@type":"WebSite","@id":"https:\/\/kpw.law\/en\/#website","url":"https:\/\/kpw.law\/en\/","name":"KPW PartmbB \u2013 Rechtsanw\u00e4lte und Fachanw\u00e4lte","description":"Rechtsanw\u00e4lte f\u00fcr IP- und IT-Recht","publisher":{"@id":"https:\/\/kpw.law\/en\/#organization"},"alternateName":"kpw.law","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kpw.law\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kpw.law\/en\/#organization","name":"KPW PartmbB","alternateName":"KPW","url":"https:\/\/kpw.law\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kpw.law\/en\/#\/schema\/logo\/image\/","url":"https:\/\/kpw.law\/wp-content\/uploads\/KPW400x400.jpg","contentUrl":"https:\/\/kpw.law\/wp-content\/uploads\/KPW400x400.jpg","width":400,"height":400,"caption":"KPW PartmbB"},"image":{"@id":"https:\/\/kpw.law\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/kpw"],"description":"KPW ist eine auf IP und IT-Recht spezialisierte Kanzlei mit Rechts- und Fachanw\u00e4lten in Stuttgart. KPW ber\u00e4t Unternehmen in den Bereichen Wettbewerbsrecht, Markenrecht, Designrecht, Urheberrecht, IT-Recht, Patentrecht, Datenschutzrecht, E-Commerce und Know-How-Schutz.","email":"info@kpw.law","telephone":"+4971141019030","legalName":"KPW PartmbB","foundingDate":"2010-04-01","vatID":"DE270757792","duns":"341580247","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"1","maxValue":"10"}},{"@type":"Person","@id":"https:\/\/kpw.law\/en\/#\/schema\/person\/bb7a5be61de17c2c027e254e249214bd","name":"Clemens Pfitzer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","caption":"Clemens Pfitzer"},"description":"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz und Fachanwalt f\u00fcr IT-Recht, t\u00e4tig in den Bereichen Markenrecht, Wettbewerbsrecht, Urheberrecht, Designrecht, Know-How-Schutz, Patentrecht, IT-Recht, E-Commerce, Datenschutz","sameAs":["https:\/\/kpw.law","https:\/\/www.linkedin.com\/in\/pfitzer\/","https:\/\/x.com\/clemenspfitzer"],"gender":"m\u00e4nnlich","knowsAbout":["Markenrecht","Wettbewerbsrecht","Designrecht","Urheberrecht","E-Commerce","Datenschutzrecht","Patentrecht","IT-Recht","Softwarelizenzen","Gesch\u00e4ftsgeheimnisse"],"knowsLanguage":["Englisch","Deutsch"],"jobTitle":"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz, Fachanwalt f\u00fcr IT-Recht","worksFor":"KPW PartmbB"}]}},"_links":{"self":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/29994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/comments?post=29994"}],"version-history":[{"count":4,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/29994\/revisions"}],"predecessor-version":[{"id":30012,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/29994\/revisions\/30012"}],"wp:attachment":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/media?parent=29994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/categories?post=29994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/tags?post=29994"},{"taxonomy":"thema","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/thema?post=29994"},{"taxonomy":"rechtsgebiet","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/rechtsgebiet?post=29994"},{"taxonomy":"produkt","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/produkt?post=29994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}