The French DPA, the CNIL, fines AMAZON EUROPE CORE 35 million euros for placing cookies without prior consent & providing satisfactory info.
I carried out research & wrote a report for @TACD_Consumers @boell_eu On Amazon, Netflix, Spotify - EU-US privacy experiences
https://twitter.com/PrivacyMatters/status/1336937412791054339
I carried out research & wrote a report for @TACD_Consumers @boell_eu On Amazon, Netflix, Spotify - EU-US privacy experiences

"While Amazon EU, Netflix EU and Spotify EU do present cookie notices to visitors on their websites, they rely on implied consent that is contrary to the legal requirement of opt-in consent in the EU." Sept 2019.

"Amazon EU advises it âmay also ask for your consent to process your personal information for a specific
purpose that we communicate to you,â but does not set out anywhere what purposes it relies on consent
for. Nor was the company found to refer to consent in its cookie notice
purpose that we communicate to you,â but does not set out anywhere what purposes it relies on consent
for. Nor was the company found to refer to consent in its cookie notice
though the company does set cookies for advertising purposes that require consent under EU law"
"Instead, [Amazon EU] presents a less-than obvious cookie notice that advises âWe use cookies to provide and improve our services. By using our site,
you consent to cookies.â
"Instead, [Amazon EU] presents a less-than obvious cookie notice that advises âWe use cookies to provide and improve our services. By using our site,
you consent to cookies.â


"Cookies are used for a range of purposes including âads, relevant to your interests on Amazon sites and third-party sites.â This practice does not meet the ePD, case law and regulatory guidance in the EU" <me in this 2019 report https://eu.boell.org/en/2019/12/11/privacy-eu-and-us-consumer-experiences-across-three-global-platforms
"The research also found that when the mystery shoppers created accounts, Spotify EU/US and Amazon
EU/US automatically set to ON some defaults that the companies use for their own and for third-party
behavioural advertising purposes"
EU/US automatically set to ON some defaults that the companies use for their own and for third-party
behavioural advertising purposes"
"It is not clear if turning off these defaults stops the profiling and use of data for advertising purposes or if it only stops the targeting of ads based on data about how people use the services ....
This reflects the ambiguity of related privacy policies and text used to support marketing and advertising-related default settings. " (page 22)
"The three companies also appear to use cookies and other techniques and default settings for multiple
purposes, bundling these together without specific choices being available to individuals. They use
different terms for similar purposes but do not describe them clearly nor are
purposes, bundling these together without specific choices being available to individuals. They use
different terms for similar purposes but do not describe them clearly nor are
they clear about what data is used in relation to these terms or purposes. For example, âpersonalised experiencesâ, âinterest-based advertisingâ, âtargeted advertisingâ, âtailored advertisingâ, and âmarketingâ are all used interchangeably."