6 Total
1 High severity
5 Medium severity
0 Low severity
Summary

This document establishes Amazon's data collection, use, and sharing practices across Amazon.com, Alexa, and Amazon devices and services. Amazon collects personal data including voice recordings, browsing history, purchase history, location, and behavioral inferences, and shares this data with third-party sellers, advertisers, and business partners. The document authorizes Amazon to use collected data for targeted advertising on and off Amazon's platforms and permits users to adjust advertising preferences through designated account settings.

Technical / Legal Breakdown

This document is Amazon's Privacy Notice governing the collection, use, storage, and sharing of personal information across Amazon's retail marketplace, devices, and affiliated services, with stated legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The notice states that Amazon collects an extensive range of personal data including name, address, payment information, voice and image data, location data, browsing and purchase history, biometric identifiers through Alexa and Amazon devices, and inferences drawn from this data; the terms authorize sharing this information with third-party sellers, business partners, advertising networks, and affiliated entities, and permit use for purposes including targeted advertising, product improvement, and fraud prevention. Notably, the notice asserts broad data collection through Amazon devices including ambient voice recording, cross-context behavioral advertising, and the use of purchase data to serve advertising both on and off Amazon properties, practices that extend beyond transactional necessity; the agreement also reserves the right to retain data for undefined periods necessary for legal or operational purposes, which may interact with data minimization requirements under applicable law. The notice engages GDPR and UK GDPR for EU and UK residents respectively, CCPA and CPRA for California residents, and broader FTC Act obligations regarding unfair or deceptive data practices; jurisdiction-specific rights including access, deletion, portability, and opt-out of targeted advertising are acknowledged but vary materially by geography, and the practical enforceability of certain asserted data uses depends on regulatory interpretation in the applicable jurisdiction.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial
High — 1 provision
Medium — 5 provisions

Monitoring

Amazon Marketplace has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle AI and Machine Learning Training Data Use and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000027
Version ID CA-V-000640
SHA-256 8d2e6f401e3074315cb3ef72d05c681865898ea8e39095517ad2ab8b4eb73cd6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans