DPO SchoolDPO School

Court of Justice judgment · Case C-492/23

X v Russmedia Digital SRL and Inform Media Press SRL

Reviewed by Sergio Maldonado Elvira on 29 October 2026

Case
C-492/23
Court
Court of Justice
Date of judgment
2 December 2025
ECLI
ECLI:EU:C:2025:935
Instrument
Regulation (EU) 2016/679 (GDPR)

Holding (summary, not the official text)

An online marketplace operator is a controller of personal data in ads published on its site; before publication it must identify ads with sensitive data, check the advertiser is the person concerned or has explicit consent, take security measures against copying, and cannot rely on the hosting exemptions of the e-Commerce Directive for these GDPR duties.

Checked against the official source on 28 October 2026.

Only the judgment as published by the Court of Justice is authoritative. This is reference material, not legal advice.

All judgments