"CNPD, the Luxembourg data protection authority slapped Amazon with the record fine in a July 16 decision that accused the online retailer of processing personal data in violation of the EU’s General Data Protection Regulation, or GDPR. Amazon disclosed the findings in a regulatory filing on Friday, saying the decision is “without merit.”
“There has been no data breach, and no customer data has been exposed to any third party,” Amazon said in a statement, adding that it plans to appeal. “These facts are undisputed. We strongly disagree with the CNPD’s ruling.”
The decision concludes a probe started by a 2018 complaint from French privacy rights group La Quadrature du Net. It cautiously welcomed the decision."