Law,Policy,and the Internet - Cases and Legislation

Cases and Legislation

Cases

European Court of Human Rights (ECtHR)

• Klass and others v Germany, App no 5029/71, (1978) 2 EHRR 214

• Leander v Sweden, App no 9248/81, (1987) 9 EHRR 433

• Kruslin v France, App no 11801/85 (1990)

• Niemietz v Germany, App no 13710/88 (1992)

• Amann v Switzerland [GC], App no 27798/95 (2000)

• Rotaru v Romania, App no 28341/95 (2000) GC

• Peck v UK, App no 44647/98 (2003)

• Giacomelli v Italy, App no 59909/00 (2006)

• Copland v the United Kingdom, App no 62617/00 (2007)

• S and Marper v the United Kingdom, App nos 30562/04 and 30566/04 (2008) GC

• Uzun v Germany, App no 35623/05 (2010)

• Dimitrov-Kazakov v Bulgaria, App no 11379/03 (2011)

• Ahrens v Germany, App no 45071/09 (2012)

• Delfi v Estonia, App no 64669/09 (16 June 2015)

• Cengiz and others v Turkey, App nos 48226/10 and 14027/11 (1 December 2015)

• MTE v Hungary, App no 22947/13 (2 February 2016)

• Bărbulescu v Romania [GC], App no 61496/08 (2017)

• Pihl v Sweden, App no 74742/14 (9 March 2017)

• Catt v UK, App no 43514/15 (2019)

• Saber v Norway, App no 459/18 (2021)

• Big Brother Watch and others v the United Kingdom, App nos 58170/13, 62322/14 and 24960/15 (2021)

• Sanchez v France, App no 45581/15 (15 May 2023)

• Von Hannover v Germany, App no 59320/00

• PG and JH v UK, App no 44787/98

• Roman Zakharov v Russia App no 47143/06

• Malone v the United Kingdom, App no 8691/79

• Centrum för Rättvisa v Sweden, App no 35252/08

European Union (Court of Justice and General Court)

• Joined Cases C-238/99 P, C-244/99 P, C-245/99 P, C-247/99 P, C-250/99 P to C-252/99 P and C-254/99 P Limburgse Vinyl Maatschappij and Others v Commission, EU:C:2002:582

• Case C-236/08 (Joined Cases C-236/08 to C-238/08) Google France v Louis Vuitton, ECLI:EU:C:2010:159

• Case C-324/09 L’Oreal v eBay, EU:C:2011:474

• Case C-302/10 Infopaq International A/S v Danske Dagblades Forening (Infopaq II), [2012] ECLI:EU:C:2012:16

• Case C-291/13 Papasavvas v O Fileftheros Dimosia Etairia and Others (11 September 2014), ECLI:EU:C:2014:2209

• Case C-131/12 Google Spain v AEPD and Mario Costeja González, ECLI:EU:C:2014:317

• Case C-484/14 McFadden v Sony Music Entertainment Germany GmbH (15 September 2016), ECLI:EU:C:2016:689

• Case C-434/15 Asociacion Profesional Elite Taxi v Uber Systems Spain, SL (20 December 2017), ECLI:EU:C:2017:981

• C-524/15 Criminal proceedings against Luca Menci, ECLI:EU:C:2018:197

• Case C-320/16 Uber France v Bensalem (10 April 2018), ECLI:EU:C:2018:221

• Case C-210/16 Wirtschaftsakademie Schleswig-Holstein GmbH (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH), ECLI:EU:C:2018:388

• Case C-25/17 Jehovan todistajat, ECLI:EU:C:2018:551

• Case C-18/18 Eva Glawischnig-Piesczek v Facebook Ireland Limited, ECLI:EU:C:2019:821

• Case C-390/18 Airbnb Ireland UC v Hotelière Turenne SAS (19 December 2019), ECLI:EU:C:2019:1112

• Case C-40/17 Fashion ID, ECLI:EU:C:2019:629

• Case C-692/19 B v Yodel Delivery Network Ltd, EU:C:2020:288

• Joined Cases C-682/18 and C-683/18 Frank Peterson v Google & Elsevier v Cyando (22 June 2021)

• Case C-117/20 bpost SA v Autorité belge de la concurrence, EU:C:2022:202

• Case C-151/20 Bundeswettbewerbsbehörde v Nordzucker AG and Others, EU:C:2022:203

• Case T-557/20 Single Resolution Board v European Data Protection Supervisor, judgment of 26 April 2023, ECLI:EU:T:2023:219

• Case C-252/21 Meta Platforms Inc and Others v Bundeskartellamt, ECLI:EU:C:2023:539

• Case C-604/22 IAB Europe v Gegevensbeschermingsautoriteit, ECLI:EU:C:2024:214

• Case C-446/21 Schrems v Meta Platforms Ireland Ltd, ECLI:EU:C:2024:834

• Case T-348/23 Zalando SE v European Commission (General Court, 3 September 2025), ECLI:EU:T:2025:821

• Case C-492/23 X v Russmedia Digital SRL and Inform Media Press SRL (Russmedia), ECLI:EU:C:2025:935

• Case C-131/12 Google Spain v Agencia Espanola de Proteccion de Datos (AEPD) and Gonzalez

• Case C-70/10 Scarlet Extended v SABAM

• Case C-360/10 SABAM v Netlog

• C-314/12 UPC Telekabel Wien v Constantin

• Case C-401/19 Poland v Parliament and Council

• Case C-101/01 Lindqvist

• Case C-212/13 Rynes

• Case C-184/20 OT v Vyriausioji tarnybinės etikos komisija

• Case C-434/16 Nowak

• Case C-487/21 Österreichische Datenschutzbehörde

• Joined Cases C-141/12 and C-372/12 YS and others

• Case C-582/14 Patrick Breyer v Bundesrepublik Deutschland

• Case C-21/23 Lindenapotheke

• Case C-13/16 Rigas

• Case C-203/22 Dun & Bradstreet

• Case C-634/21 SCHUFA Holding

• Case C-507/17 Google v CNIL

• Case C-250/25 Like Company v Google

• Tele2/Sverige C-203/15 and Watson and others C-698/15

United Kingdom

• Donoghue v Stevenson [1932] AC 562

• Attorney General’s Reference (No 1 of 1991) [1993] QB 94

• DPP v Bignell [1998] 1 Cr App R 1

• Godfrey v Demon [1999] EWHC QB 244

• R v Bow Street Magistrates Court ex Parte Allison No 2 (AP) [2000] 2 AC 216

• R v Caffrey, Southwark Crown Court (17 October 2003)

• Durant v FSA [2003] EWCA Civ 1746

• DPP v Lennon [2006] EWHC 1201 (Admin)

• Maxwell-King v United States [2006] EWHC 3033 (Admin)

• Metropolitan International Schools Ltd v Designtechnica Corporation [2009] EWHC 1765 (QB)

• R (McKinnon) v DPP [2009] EWHC 2021 (Admin)

• Everett v Comojo [2011] EWCA Civ 13

• The Newspaper Licensing Agency Ltd v Meltwater Holding BV [2011] EWCA Civ 890

• Temple Island Collections Ltd v New English Teas Ltd [2012] EWPCC 1

• Tamiz v Google [2012] EWHC 449 (QB)

• R v Crosskey (Gareth) [2012] EWCA Crim 1645

• [2013] EWCA Crim 1420

• Ahzaz v United States [2013] EWHC 216 (Admin)

• Edem v ICO [2014] EWCA Civ 92

• Davis & Ors v Secretary of State for the Home Department [2015] EWHC 2092 (Admin)

• Cartier International and Others v BSkyB and others [2016] EWCA Civ 658

• [2017] EWCA Crim 1395

• NT1 & NT2 v Google LLC [2018] EWHC 799 (QB)

• [2018] Crim LR 243 CLW/17/46/12

• R (Bridges) v The Chief Constable of South Wales Police [2019] EWHC 2341 (Admin)

• [2019] 1 WLR 6208

• [2019] EWCA Crim 1541

• [2019] EWHC 3408 (QB)

• R (Edward Bridges) v The Chief Constable of South Wales Police and others [2020] EWCA Civ 1058

• Uber v Aslam [2021] UKSC 5

• Soriano v Forensic News [2021] EWHC 56 (QB)

• THJ Systems Ltd v Sheridan [2023] EWCA Civ 1354

• Information Commissioner v Clearview AI [2025] UKUT 319 (AAC)

• Raine v JD Wetherspoon [2025] EWHC 1593 (KB)

• Shaun Thompson and another v The Met Police Commissioner [2026] EWHC 915

United States

• Cubby v CompuServe, 776 F Supp 135 (SDNY, 1991)

• Stratton Oakmont, Inc v Prodigy Services Co, 1995 NY Misc LEXIS 712

• Religious Technology Center v Netcom On-Line Communication Services, Inc, 907 F Supp 1361 (ND Cal 1995)

• A&M Records, Inc v Napster, Inc, 239 F3d 1004 (9th Cir 2001)

• Authors Guild v Google, Inc, 804 F3d 202 (2d Cir 2015)

• Thaler v Perlmutter, 687 F Supp 3d 140 (DDC 2023)

• Thaler v Perlmutter, No 23-5233 (DC Cir, 18 March 2025)

• Kadrey v Meta Platforms, Inc, No 23-cv-03417 (ND Cal, 25 June 2025)

• Bartz v Anthropic PBC, No 24-cv-05417 (ND Cal, 23 June 2025)

• Lunney v Prodigy Services Co, 94 NY 2d 242

• Lenz v Universal Music Corp, 801 F.3d 1126 (9th Cir 2015)

• Allen v Perlmutter (1:24-cv-02665), District Court, D Colorado

• The New York Times v Microsoft et al, No 1:23-cv-11195 (SDNY)

• Andersen et al v Stability AI, No 3:23-cv-00201 (ND Cal)

• Authors Guild v OpenAI Inc, No 1:23-cv-08292 (SDNY)

• Disney Enterprises Inc v Midjourney Inc, No 2:25-cv-05275 (CD Cal)

• State of New Mexico v Meta Platforms, D-101-CV-2023-02838, 1st Judicial District Court, Santa Fe County

• Christina Arlington Smith and others v TikTok Inc and others, Case No 22STCV21355, Superior Court of the State of California, County of Los Angeles, Central District

• Walters v OpenAI, LLC (23-A-04860-2)

Germany

• BGH (23 April 2024), Case KVB 56/22, Amazon

• Robert Kneschke v LAION eV, Hamburg Regional Court, Case No 310 O 227/23 (27 September 2024)

• GEMA v OpenAI, Munich Regional Court I, Case No 42 O 14139/24 (11 November 2025)

France

• LICRA and UEJF v Yahoo! Inc and Yahoo! France, Tribunal de Grande Instance de Paris (22 May 2000, and Ordonnance de référé, 20 November 2000)

Canada

• R v Barnardo [1995] Ont CJ Lexis

Legislation

European Union

• Council Directive 93/13/EEC of 5 April 1993 on unfair terms in consumer contracts [1993] OJ L 95

• Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data [1995] OJ L 281/31 (the DPD; repealed by the GDPR)

• Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market [2000] OJ L 178/1 (the Directive on electronic commerce)

• Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector [2002] OJ L 201/37 (the e-Privacy Directive), as updated by Directive 2009/136/EC

• Directive 2002/14/EC of the European Parliament and of the Council, and Directive 2009/38/EC of the European Parliament and of the Council [2009] OJ L 122/28

• Council Regulation (EC) No 1/2003 of 16 December 2002 on the implementation of the rules on competition laid down in Articles 81 and 82 of the Treaty [2003] OJ L 1/1

• Council Decision 2008/615/JHA of 23 June 2008 on the stepping up of cross-border cooperation, particularly in combating terrorism and cross-border crime, and Council Decision 2008/616/JHA of 23 June 2008 on the implementation of Decision 2008/615/JHA (together, Prüm I)

• Framework Decision 2008/977/JHA

• Directive (EU) 2015/1535 of the European Parliament and of the Council of 9 September 2015 laying down a procedure for the provision of information in the field of technical regulations and of rules on Information Society services [2015] OJ L 241

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC [2016] OJ L 119/1 (the General Data Protection Regulation, GDPR)

• Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (repealed by the NIS 2 Directive)

• Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA, OJ L 119

• Regulation (EU) 2017/2226 of the European Parliament and of the Council

• Regulation (EU) 2018/1240 of the European Parliament and of the Council

• Directive (EU) 2019/790 of the European Parliament and of the Council of 17 April 2019 on copyright and related rights in the Digital Single Market, amending Directives 96/9/EC and 2001/29/EC [2019] OJ L 130/92

• Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification, repealing Regulation (EU) No 526/2013 (the Cybersecurity Act)

• Regulation (EU) 2019/816 of the European Parliament and of the Council

• Regulation (EU) 2019/817 of the European Parliament and of the Council

• Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019

• Directive (EU) 2019/2161 of the European Parliament and of the Council of 27 November 2019 [2019] OJ L 328

• Regulation (EU) 2021/1134 of the European Parliament and of the Council

• Commission Delegated Regulation (EU) 2022/30 of 29 October 2021 supplementing Directive 2014/53/EU of the European Parliament and of the Council

• Regulation (EU) 2022/612 of the European Parliament and of the Council of 6 April 2022 on roaming on public mobile communications networks within the Union [2022] OJ L 115/1 (the Roaming Regulation)

• Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector, amending Directives (EU) 2019/1937 and (EU) 2020/1828 [2022] OJ L 265/1 (the Digital Markets Act, DMA)

• Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market For Digital Services, amending Directive 2000/31/EC [2022] OJ L 277/1 (the Digital Services Act, DSA)

• Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (the NIS 2 Directive)

• Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities, repealing Council Directive 2008/114/EC (the Critical Entities Resilience Directive)

• Regulation (EU) 2023/988 of the European Parliament and of the Council [2023] OJ L 135/1 (the General Product Safety Regulation)

• Regulation (EU) 2023/1781 of the European Parliament and of the Council of 13 September 2023 establishing a framework of measures for strengthening Europe's semiconductor ecosystem, amending Regulation (EU) 2021/694 (the Chips Act)

• Regulation (EU) 2024/982 of the European Parliament and of the Council of 13 March 2024 on the automated search and exchange of data for police cooperation, amending Council Decisions 2008/615/JHA and 2008/616/JHA and Regulations (EU) 2018/1726, (EU) 2019/817 and (EU) 2019/818 (the Prüm II Regulation)

• Regulation (EU) 2024/1358 of the European Parliament and of the Council

• Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 [2024] OJ L 1689 (the Artificial Intelligence Act)

• Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements, amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (the Cyber Resilience Act)

• Directive (EU) 2024/2831 of the European Parliament and of the Council of 23 October 2024 on improving working conditions in platform work, OJ L, 2024/2831

• Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents, amending Regulation (EU) 2021/694 (the Cyber Solidarity Act)

Council of Europe

• Convention on Cybercrime (23 November 2001)

• Framework Convention on Artificial Intelligence (5 September 2024)

United Nations

• United Nations Convention against Transnational Organized Crime (UNTOC)

• United Nations Convention against Cybercrime, Strengthening International Cooperation for Combating Certain Crimes Committed by Means of Information and Communications Technology Systems and for the Sharing of Evidence in Electronic Form of Serious Crimes

United Kingdom

• Police and Criminal Evidence Act 1984

• Criminal Justice and Public Order Act 1994

• Electronic Commerce (EC Directive) Regulations 2002 (SI 2002/2013)

• Sexual Offences Act 2003

• Privacy and Electronic Communications Regulations 2003

• Police and Justice Act 2006

• Serious Crime Act 2015

• Investigatory Powers Act 2016

• Data Protection Act 2018 (DPA 2018)

• Product Security and Telecommunications Infrastructure Act 2022 (PSTI Act)

• Data (Use and Access) Act 2025

• Online Safety Act 2023 (Priority Offences) (Amendment) Regulations 2025 (SI 2025/1352)

• Crime and Policing Act 2026

United States

• Communications Decency Act 1996, 47 U.S.C. (including the s 230(c) immunity provision)

• California Consumer Privacy Act 2018

• 50 U.S.C. § 1881a

Germany

• German Competition Act (GWB)