The Administrative Court has annulled a substantial fine imposed on Amazon by the National Data Protection Commission (CNPD), citing procedural failures in how the penalty was calculated.
The case concerns a €746 million fine issued by the CNPD in July 2021 against Amazon. While the court confirmed that violations of the General Data Protection Regulation (GDPR) had indeed occurred, it found that the CNPD had failed to properly examine whether the breaches resulted from intentional or negligent conduct.
According to the ruling, the data protection authority had issued the penalty almost automatically, without conducting the required assessment of fault. The court noted that case law from the European Court of Justice explicitly mandates such an examination.
As a result, the Administrative Court has annulled the fine and ordered the CNPD to reassess the case.
