The CNPD found that Amazon used a combination of data from various sources, including cookies, IP addresses, and device information, to create a detailed profile of its customers. This was in violation of the GDPR’s requirement that companies must obtain explicit consent from customers before collecting and processing their personal data.
The CNPD’s decision was a significant blow to Amazon, as it was the first time the company had been fined for GDPR violations.
Amazon’s Dispute with the CNPD Over GDPR Fines
The European Union’s General Data Protection Regulation (GDPR) has been in effect since May 2018, and since then, the European Union’s data protection authority, the CNPD (Commission Nationale de la Protection des DonnĂ©es), has issued several decisions on GDPR fines.
