A Luxembourg appeal court last week annulled a €746m fine imposed on Amazon by the country’s privacy regulator National Commission for Data Protection (CNPD) for breaching privacy rules under Europe’s General Data Protection Regulation (GDPR).
CNPD had imposed the record fine on Amazon in 2021 following complains that although the company was explicit about the data it was collecting and how it processed it, it did not explicitly ask for consent for processing. A lower court had sided with CNPD and upheld the fine.
Whilst the appeal judges upheld the privacy violations, they accepted Amazon’s argument that the CNPD should have assessed whether the violations were intentional or not, and therefore whether more lenient sanctions could have been applied.
The case has been referred back to CNPD.
Photo credits: Reanimated Man X