In an important decision the CJEU has found that the administrator of a Facebook ‘fan page’ was a joint data controller with Facebook Ireland and Facebook Inc, and that a German data protection supervisory authority is competent to assess the lawfulness of data processing carried out by Facebook Germany, applying German data protection law. Continue reading