Websites should not owe damages for induced data law breaches, EU court says
( November 5, 2026, 10:10 GMT | Official Statement) -- MLex Summary: Website operators should not owe damages for non-material harm where individuals knowingly, automatically and repeatedly provoke EU data protection law violations to get compensation, an EU court legal opinion said Thursday. Advocate General Maciej Szpunar said IP addresses transferred to third parties constitute personal data if recipients can reasonably identify users and operators knew or should have known this. The case concerns a website operator who paid €170 ($191) after a user deliberately triggered an IP address transfer to Google through the site's dynamic Google Fonts configuration.The opinion is attached in German. The case reference is C-654/25....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.