Luxembourg fines Amazon €746 million

Luxembourg’s Data Protection Authority, the CNPD has imposed a record fine of €746 million on Amazon Europe Core S.à r.l. for violations of the EU GDPR.

The case relates to collective legal action taken in 2021 by the digital rights advocacy group La Quadrature du Net about targeted advertising. On 18 March 2025, the Administrative Court of Luxembourg decided to dismiss Amazon's appeal and uphold the CNPD's initial decision. This means that the fine imposed for GDPR violations will be upheld, and the company will have to comply with the corrective measures ordered by the CNPD, the authority says.

While Amazon is said to be considering an appeal, the CNDP has stated that it will not issue any details of its decision during the appeals period or during any possible proceedings.

“Although the Court's decision is public, national data protection law requires the CNPD to respect professional secrecy (Article 42) and prevents it from commenting on individual cases,” the CNPD says.

See:

• The announcement of 19 March
• La Quadrature du Net