The Court of Justice of the European Union (CJEU) grants the General Data Protection Regulation (GDPR) general primacy over the E-Commerce Directive (ECD). From the former, the Court derives three obligations for online marketplaces: to screen all listings for sensitive data prior to publication, to verify the identity of the inserter where necessary, and to prevent the dissemination of published content by third parties as far as possible. This judgment convinces neither in terms of its arguments nor its outcome, and its excessive tendency runs the risk of demolishing cornerstones of internet law.
Tobias Mast (Thu,) studied this question.