Luxembourg Tribunal Upholds $808 Million Fine Against Amazon for GDPR Breaches
The Luxembourg Administrative Tribunal Wednesday upheld a July 2021 decision by the National Data Protection Commission that slapped Amazon with a fine of 746 million euros ($808 million) for General Data Protection Regulation (GDPR) breaches. The court also ordered the platform to take corrective measures or face a daily penalty of 746,000 euros.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
The tribunal agreed with the regulator's analysis that Amazon, in the context of processing personal data for internet-based advertising, infringed several GDPR provisions, it said.
The violations concerned the legal basis for processing personal data; failure to comply with transparency obligations and to provide information to people concerned about the processing of their data; violations of data subjects' access, rectification and erasure rights; and breach of the right to object to the processing of personal data, the tribunal said. Its judgment can be appealed to the Administrative Court, it noted.