A traffic app becomes a platform-liability landmark
On 16 June 2026, the Court of Justice of the European Union's Grand Chamber ruled in joined cases C-188/24 (WebGroup Czech Republic and NKL Associates) and C-190/24 (Coyote System) that an operator whose algorithm decides "under what conditions, how and in which order of priority" user content is disseminated thereby controls that content — and forfeits the hosting-liability exemption under the e-Commerce Directive and, by extension, Article 6 of the Digital Services Act (CJEU judgment page).
The facts were narrow: Coyote System, a French geolocation driving-assistance app, was challenged over its rebroadcast of user-submitted alerts about roadside police checks, while the WebGroup and NKL Associates cases concerned French age-verification rules for pornography sites. Neither company is a household name in content moderation. But the Court's reasoning was written in general terms — control turns on how the algorithm decides what to show, not on whether a human ever looks at the content — and legal commentators immediately clocked the wider target: recommender-driven platforms generally (CJEU press release).
Why the reasoning travels so far
The DSA and its predecessor, the e-Commerce Directive, were built on a deliberate bargain: platforms that merely store and transmit user content — without exercising editorial control over it — are shielded from liability for that content unless they have actual knowledge of illegality and fail to act. That bargain, codified in Article 6 of the DSA, is what has allowed hosting services to operate at internet scale without pre-screening every post (EUR-Lex, Regulation 2022/2065).
The Grand Chamber did not overturn that bargain outright. It built on the Court's earlier YouTube/Cyando line of cases (C-682/18), which already held that platforms lose immunity if they play an "active role" in giving the content its character. What Coyote System adds is a much broader definition of "active role": any algorithmic system that decides the conditions, manner, or priority of dissemination counts, regardless of whether a human at the company ever sees the specific post and regardless of automation (IPKat analysis; EU Law Analysis).
That is, functionally, a description of every modern content-ranking system — the chronological-versus-relevance toggle on Facebook, the For You page on TikTok, the search-relevance model behind Google's index, the trending-topics sort on Bluesky. As the IPKat's analysis puts it, the ruling "could be read as stripping the vast majority of today's user-generated-content platforms — probably including most, if not all, social media platforms broadly intended — of protection." The Electronic Frontier Foundation goes further, warning the logic sweeps in "Facebook, Amazon or Bluesky" alike, since all three have some algorithmic control over what users see (EFF Deeplinks, 22 July 2026).
Steelmanning the Court
The ruling is not incoherent, and critics should engage with its strongest version rather than dismiss it as judicial overreach. The hosting exemption was always meant for passive conduits — services that store what users upload without shaping its reach. A platform that runs a ranking model tuned to maximize engagement, and that model demonstrably amplifies some content over other content in the platform's commercial interest, is doing something meaningfully different from a web host that just keeps files on a server. Treating that as publishing rather than hosting is a defensible reading of what "neutral" should mean, and it tracks a broader European anxiety — echoed in recent Russmedia and Italian AGCOM enforcement actions, per EFF's reporting — that recommender systems have become the primary vector for the harms the DSA was written to address, from disinformation to addictive design for minors.
Why the fix is disproportionate
The problem is not the diagnosis; it's the remedy the Court has now authorized courts across 27 member states to apply. The DSA already has a purpose-built instrument for recommender-system accountability: its recommender-transparency provisions require platforms to disclose the main parameters of their ranking systems and, for very large platforms, offer a non-profiling alternative. That is a transparency and choice regime, calibrated to the actual harm (opacity, manipulation) without collapsing the hosting/publishing distinction that lets a mid-sized EU platform operate without pre-clearing every post through outside counsel. Coyote System instead makes liability turn on a binary the Court itself never clearly bounds — how much algorithmic sorting is too much control — which is precisely the kind of standard that pushes smaller platforms toward the safest available response: delete first, rank never, or exit the EU market rather than litigate the line case by case.
That is a bad trade for the DSA's own goals. The regulation's prohibition on general monitoring obligations exists because Brussels correctly judged, when the DSA was negotiated, that forcing platforms to actively police everything would chill legitimate speech and entrench incumbents who can afford compliance overhead that startups cannot. A ruling that functionally converts most ranking algorithms into an admission of editorial control undercuts that judgment through case law rather than legislation — and does so via two cases about pornography age-gates and speed-camera alerts, neither of which involved a large recommender-driven social platform as a party. The European Commission and Parliament, not two French regulatory disputes reaching Luxembourg, should be the ones deciding whether the DSA's liability architecture needs rebalancing. Until they act, platforms operating in the EU face months of uncertainty about which side of the hosting line their product now falls on — uncertainty that, ironically, is likeliest to be resolved by platforms doing less curation, not more responsible curation, of the content Europeans see.