Luxembourg Court Overturns Amazon’s €746 Million GDPR Fine
Summary
A Luxembourg court overturned Amazon’s €746 million GDPR fine and sent the case back to the CNPD. It upheld findings on consent practices but said the regulator must reassess intent and penalty proportionality.
Key points
- The court vacated the €746 million fine imposed by Luxembourg’s data protection regulator in 2021 and referred the case back to the CNPD.
- It upheld findings that Amazon’s legal basis and information procedures for targeted advertising did not comply with GDPR requirements.
- The fine was overturned because the CNPD had not assessed whether Amazon acted intentionally or adequately considered proportionality and alternative measures.
- The CNPD says Amazon has corrected the practices and may reassess whether to issue a new sanction.
- Amazon welcomed the decision and said it had appealed the original ruling.
Article Details
- Event Type
- Court reversal of a GDPR fine and referral for regulatory review
- Impact
- A Luxembourg court vacated the €746 million fine imposed on Amazon in 2021 and returned the case to the CNPD for further review. The court upheld findings concerning Amazon’s consent practices but found that the CNPD had not properly assessed intent and penalty proportionality under changed EU case law. The CNPD said Amazon had corrected the violations and left open the possibility of a new sanction.