The European Court of Justice has ruled that a German vocational school is responsible for protecting the privacy of visitors to its Facebook fan pages. It also held that a German privacy authority can take action against the firm although its European headquarters are in Ireland.