Luxembourg: CNPD issues EUR 746 million fine for Amazon's breach of GDPR rules by using personal data without consent

On 15 July 2021, the National Commission for Data Protection (Commission national pour la protection des données - CNPD) fined Amazon with a sanction of EUR 746 million for not complying with the EU General Data Protection Regulation (GDPR). Amazon allegedly used personal data without consent. The fine was publicly disclosed by Amazon in its quarterly results and confirmed by the CNPD later without the authority commenting on the matter. The full ruling is expected after the appeal deadline passes. Amazon however has the possibility to appeal the decision before the administrative tribunal within 3 months after the ruling.