Amazon delivery box;
On Thursday 12 March 2026, Luxembourg's Administrative Court annulled the €746 million fine imposed on Amazon in 2021 by the National Commission for Data Protection (CNPD), which had accused the company of violating EU data protection rules related to behavioural advertising practices.
The fine, issued under the EU’s General Data Protection Regulation (GDPR), was one of the largest penalties ever imposed by a European data protection authority.
On Friday 13 March 2026, Amazon published a statement reacting to the ruling.
“We're pleased the Luxembourg Court of Appeal has overturned the CNPD's decision and recognised our position,” said Conor Sweeney, an Amazon spokesperson.
The company added that customer privacy remains a priority and that it works with regulators to ensure that new services are legally compliant.
Amazon also stated that when EU privacy rules came into force in 2018, the company had worked “in good faith” to provide customers with control over whether they see personalised advertising based on their interests. It reiterated that it had strongly disagreed with the initial ruling and the fine imposed in the case, which is why it appealed.
