The administrative court in Luxembourg has dismissed an appeal brought by the online retail company Amazon against the €746 million fine imposed by the Luxembourg data protection authority, the National Commission for Data Protection (CNPD), in July 2021. The court upheld the CNPD's findings that Amazon had violated Articles 6, 12-17 and 21 of the EU General Data Protection Regulation (GDPR) in its processing of personal data for interest-based advertising purposes and a lack of transparency concerning its activities.
The CNPD also imposed a €746,000 daily penalty against Amazon until Amazon corrected its infringing activities. The daily penalty was suspended while the appeal was ongoing but has now been reinstated.
A statement from the CNPD confirming the court's decision is available here.
In a statement given to Euronews, a spokesperson for Amazon said: "Despite our best efforts to engage constructively on the proper interpretation of new and untested provisions of European privacy law, the CNPD's decision instead imposed an unprecedented fine based on subjective interpretations of the law about which they had not previously published any interpretive guidance."
Amazon is considering whether to appeal against the decision.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 5,750 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.
