tl;dr: The CJEU ruled that VPNs are "lawful technical tools" and that VPN providers aren't liable when users bypass geo-restrictions to access copyrighted content. The case involved a Belgian-hosted scholarly edition of Anne Frank's manuscripts that geo-blocked Dutch visitors (where the work is still under copyright until 2037); the court held that as long as publishers deploy "state-of-the-art" geo-blocking, they aren't liable for determined users circumventing it via VPN. The ruling shifts responsibility onto rightsholders and publishers rather than privacy tools or their users.