Recital 23 — service provider control liability exemption exception

Intermediary Liability Framework under DSA Hosting Services under DSA DSA Scope and Digital Services Coverage Liability Recipient

In force · version of27 October 2022 · EUR-Lex ↗

Version history 1

2022-10-27in force CELEX 02022R2065-20221027

The exemption of liability should not apply where the recipient of the service is acting under the authority or the control of the provider of a hosting service. For example, where the provider of an online platform that allows consumers to conclude distance contracts with traders determines the price of the goods or services offered by the trader, it could be considered that the trader acts under the authority or control of that online platform.

Related across sources

C-687/21 BL v MediaMarktSaturn Hagen-Iserlohn GmbH In Case C-687/21, the Court of Justice of the European Union interpreted Articles 5, 24, 32, and 82 of the GDPR in response to a preliminary ruling request from the Amtsgericht… CJEU ·Third Chamber Jan 25, 2024 Liability Integrity and Confidentiality Principle Personal Data

VI ZR 97/22 BGH · VI ZR 97/22 An employee of a private bank (the controller) erroneously sent a third party a message that was intended for a candidate in the controller’s staff selection process (the data… Jun 23, 2026 Liability Personal Data Recipient

C-300/21 UI v Österreichische Post AG C-300/21 (Österreichische Post) CJEU May 4, 2023 Liability IP Address Personal Data

C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… CJEU ·First Chamber Jan 12, 2023 Personal Data Right of Access Right to Restriction

C-526/24 Brillen Rottler GmbH & Co. KG v TC The Court of Justice of the European Union (Fourth Chamber) ruled on whether a controller may refuse a data subject's first access request under Article 15 GDPR on grounds that… CJEU ·Fourth Chamber Mar 19, 2026 Personal Data Right of Access Liability

C-757/22 Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V In a preliminary ruling requested by the German Federal Court of Justice (Bundesgerichtshof), the Court of Justice of the European Union interpreted Article 80(2) GDPR in the… CJEU ·Fourth Chamber Jul 11, 2024 Personal Data Transparency IP Address