The European Court of Justice has confirmed that Facebook can be held liable as a data controller alongside the operator of a fan page on its platform – but further guidance on jurisdiction and applicable law in cross-border processing situations may be overtaken by the implementation of the GDPR's cooperation mechanism.
