---
title: "Amazon Europe Core S.à r.l. fined EUR 746,000,000 (Luxembourg, 2021)"
canonical: "https://dposchool.com/gdpr/fine/cnpd-amazon-2021-07"
source: "https://cnpd.public.lu/en/actualites/national/2025/03/amazon-decision.html"
source_note: "Only the authority's decision is authoritative."
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Fine · Luxembourg

# Amazon Europe Core S.à r.l.: EUR 746,000,000

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

- **Authority:** Commission nationale pour la protection des données (Luxembourg)
- **Country:** Luxembourg
- **Date:** Decision of 15 July 2021
- **Amount:** EUR 746,000,000, as imposed (not converted)
- **Appeal status:** Annulled ([source](https://cnpd.public.lu/en/actualites/national/2026/03/arret-ca-amazon-cnpd.html))
- **Provisions cited:** The authority's published text cites no article numbers.

## What the fine was for (summary, not the official text)

Behavioural advertising processing without a valid legal basis, plus failures on information and data subject rights.

Not fully confirmed: CNPD pages cite no article numbers. The Luxembourg courts' news page (justice.public.lu, 19 Mar 2025) lists Articles 6, 12 to 17 and 21. Administrative Tribunal upheld the fine on 18 Mar 2025; the Administrative Court on 12 Mar 2026 confirmed most findings but annulled the fine (later CJEU case law on fault) and sent the fine question back to the CNPD.

## Official source

- [Decision or announcement of the authority](https://cnpd.public.lu/en/actualites/national/2025/03/amazon-decision.html)

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Fines](https://dposchool.com/gdpr/fines) / Amazon Europe Core S.à r.l.

[All fines](https://dposchool.com/gdpr/fines)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents