Luxembourg

Amazon Europe Core S.à.r.l.

0 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-07-16.

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-07-16
Controller / Processor: Amazon Europe Core S.à.r.l.
Sector: Industry and Commerce
Quoted Articles: Unknown
Type of violation: Non-compliance with general data processing principles

Summary

In its quarterly report, Amazon.com Inc. announced that the DPA from Luxembourg (CNPD) had fined Amazon Europe Core S.à r.l. EUR 746,000,000 for failing to process personal data in compliance with the GDPR. Amazon plans to take legal action against the decision.

---Update---

The Luxembourg Administrative Court overturned the DPA's decision, resulting in the fine being revoked. The court argued that the DPA had decided purely on a form of objective liability, failing to take fault into account. The DPA also failed to adequately assess whether the fine was appropriate.

Open original source Links to the regulator's original publication or another source.