Article 32 - Security of processing

1 preliminary ruling

Judgment of 2 Dec 2025, C-492/23 (Russmedia Digital and Inform Media Press)

Article 32 of Regulation 2016/679must be interpreted as meaning that the operator of an online marketplace, as controller, within the meaning of Article 4(7) of that regulation, of the personal data contained in advertisements published on its online marketplace, is required to implement appropriate technical and organisational security measures in order to prevent advertisements published there and containing sensitive data, in terms of Article 9(1) of that regulation, from being copied and unlawfully published on other websites.

---

Disclaimer