Blog Post
CJEU rules that companies using social plugins are liable for the collection and transmission of data
On 29 July 2019, the Court of Justice of the European Union (the "CJEU") ruled that a company embedding on its website a social plugin, such as a Facebook “Like” button, can be considered a data controller, when the inclusion of the plugin results in the browser of a visitor fetching content from the plugin provider and sending personal data of the visitor to that provider. The CJEU found that although the company may not be found responsible for the subsequent processing of data carried out by the social plugin provider, it is nevertheless responsible for facilitating the collection and transmission of data to the plugin provider via the insertion of the plugin on the website.