Format: Keynote · Required preknowledge: Intermediate · Room: EG03
Time: TBD
Topics: Data Protection & Privacy
Platform design choices can have direct consequences for data protection responsibility. Recent CJEU case law, including the Russmedia decision, shows that features such as terms of service, content exploitation rights, anonymous posting and algorithmic curation can affect whether a platform is treated as a controller or joint controller under the GDPR — independently of liability exemptions under the DSA.
This session explores what that means in practice for legal, privacy and product teams. It will examine the factors regulators and courts are increasingly looking at, the tensions around identity verification, sensitive data and anonymous use, and how organizations can assess platform architecture and align GDPR and DSA compliance before design decisions turn into legal risk.
Speakers: Joana Lawrence, Christian Woger