A new judgment against Meta includes the first-ever GDPR ruling in an antitrust-law case, which will encourage more regulators to police GDPR and will raise the enforcement risks for companies. The Court of Justice of the European Union (CJEU) recently upheld a German competition regulator’s conclusion that Meta’s data collection practices violated the GDPR and abused its dominance of social media. This article discusses the implications of the CJEU’s rulings on sensitive data and lawful bases for collecting data, as well as what cooperation looks like among regulators, with insights from data-law experts at DLA Piper, Morrison & Foerster, and Ropes & Gray. See “E.U. Regulators Bar Meta From Requiring Users to Pay With Their Data” (Jan. 25, 2023).