In a recent decision of the Tribunal of Milan three Google executives were convicted for violating data protection law, in connection with the online posting of a video showing a disabled person being bullied and insulted. This paper, after illustrating the facts of the case and the reasoning of the judge, discusses the main issue at stake, namely, the role and responsibilities of providers of platforms for user-created contents with regard to violations of data privacy.