
Amazon faces the heaviest financial penalty for non-compliance with the new EU regulation on the protection of private data of Internet users.
The Luxembourg data protection commission (CNPD) asserts that Amazon's data processing did not comply with the European Union's data protection regulations.
Amazon said in a stock exchange document published on Friday that the conviction is without merit, saying in a separate statement that it plans to appeal.
Protecting the customers' information and trust is a top priority for Amazon, the group claims. According to them, there has been no data leakage, and no customer data has been exposed to any third party.
The statement strongly disagrees with the CNPD's decision and believes the proposed fine to be disproportionate.
Amazon had already been fined 35 million euros by the French equivalent of the CNPD, the CNIL, at the end of 2020 for non-compliance with the legislation on cookies, the advertising trackers.
Google was also fined €100 million at the time. Both giants are regularly criticised for the way they use their users' personal data.
Brussels has tried to put some order in the matter by imposing its General Data Protection Regulation (GDPR) in 2018, which has become a global reference.
This means that companies must seek consent from citizens when claiming their personal data, inform them of how it will be used and allow them to delete the data. Failure to do so can result in heavy fines.
Under the new EU Digital Services Regulation, platforms will no longer be able to use data collected across multiple services to target a user against their will. They will also have to provide business customers with access to the data they generate.
Outside Europe, in 2020, the US justice system validated a $5 billion fine imposed on Facebook for failing to protect personal data.