Amazon successfully appealed a record €746 million ($854.4 million) GDPR fine. Luxembourg's data privacy regulator, the CNPD, originally imposed the penalty in 2021.
A Luxembourg court overturned the decision, ruling that the watchdog’s analysis was not properly conducted. The court has ordered a reassessment of the case.
The original fine accused Amazon of processing personal data for targeted advertising without valid user consent. This penalty represents the largest ever issued under the EU’s General Data Protection Regulation.
Amazon argued that no data breach occurred and called the regulator's legal interpretation subjective. The CNPD may still appeal this court ruling.