Amazon — Enforcement
criticalAnti-Privacy → Enforcement
Executive Summary
Luxembourg's data protection authority (CNPD) imposed a record €746 million GDPR fine on Amazon Europe Core S.à.r.l. for violations related to its advertising targeting system. The complaint, filed by French civil society group La Quadrature Du Net with over 10,000 co- signatories in 2018, alleged that Amazon processed personal data for targeted advertising without valid consent. The fine remained the largest GDPR penalty ever imposed, and in March 2025 a Luxembourg court upheld the decision after Amazon's appeal.