Recent case-law of the European Court of Justice has substantially widened the notion of “data controller" in unclear and potentially onerous ways for a range of actors involved in personal data processing. This has worrying implications for data subjects who may be characterised as controllers, and for emergent decentralised and privacy protective technologies.
The countering of terrorism propaganda online, through private companies, may little by little kill our right to freedom of expression.