Amazon has won its appeal, leading a Luxembourg court to scrap a record 746-million-euro ($854.4 million) privacy fine. The regulator, Luxembourg's National Commission for Data Protection (CNPD), was found to have not properly analyzed the case before imposing the penalty in 2021.
The original fine targeted Amazon's online behavioral advertising practices, alleging breaches of the General Data Protection Regulation (GDPR). Judges accepted Amazon's argument that the CNPD failed to determine if the company intentionally violated GDPR or was merely negligent, and that the watchdog did not explore alternative sanctions. The court annulled the 2021 decision, requiring the CNPD to reassess the case.
Amazon welcomed the judgment, stating they disagreed with the initial ruling and disproportionate fine. The CNPD acknowledged the ruling and noted that its previous action led to Amazon's compliance with online behavioral advertising regulations.