Since the decision of the Court of Justice of the European Union (CJEU) on 5 June 2018, data protection has gained in importance for all operators of Facebook fanpages: The CJEU has found that they are, together with Facebook, responsible for (Facebook's) data processing.
The CJEU justified this by the fact that operators of Facebook fanpages enable Facebook to process data of the visitors. Further, the operators may demand statistical evaluations of the data, whereby they are involved in the decision "on the purposes and means of data processing". For this reason, they are equally responsible for Facebook's compliance with data protection regulations. The ruling relates to a dispute between the Schleswig-Holstein Landeszentrum für Datenschutz and the Schleswig-Holstein Wirtschaftsakademie in Germany that has been pending since 2011, but could be a signal for the future and provide insight into the CJEU's position on data protection.
Franziska Deyerl and Sarah Pichler have prepared an analysis of the judgement and also take into account far-reaching effects that the judgement could have