Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The notice discloses that Amazon may collect Social Security numbers, driver's license numbers, corporate and financial information, and credit history information from customers in connection with Amazon Services.
This analysis describes what Amazon Marketplace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies collection of government-issued identity documents and credit history as categories of personal information Amazon may receive, which are among the most sensitive categories under U.S. consumer data protection frameworks. The notice does not specify the service contexts in which these categories are collected or the retention periods applicable to them.
The agreement discloses that Social Security numbers, driver's license numbers, and credit history information are among the categories of personal data Amazon may collect. The notice references that credit history information is received from credit bureaus and used to help prevent and detect fraud and to offer certain credit or financial services.
Cross-platform context
See how other platforms handle Collection of Social Security Numbers, Driver's License Numbers, and Credit History and similar clauses.
Compare across platforms →Monitoring
Amazon Marketplace has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"As a result of those actions, you might supply us with such information as: identifying information such as your name, address, and phone numbers; payment information; your age; your location information; your IP address; people, addresses and phone numbers listed in your Addresses; email addresses of your friends and other people; content of reviews and emails to us; personal description and photograph in Your Profile; voice recordings when you speak to Alexa; images and videos collected or stored in connection with Amazon Services; information and documents regarding identity, including Social Security and driver's license numbers; corporate and financial information; credit history information.Excerpt from Amazon Marketplace's Amazon Privacy Notice
1) REGULATORY LANDSCAPE: Collection and use of credit history information from credit bureaus may engage the Fair Credit Reporting Act (FCRA), which imposes requirements on permissible purpose, adverse action notices, and consumer disclosure rights when consumer reports are used in credit decisioning. The FTC and Consumer Financial Protection Bureau (CFPB) share enforcement authority over FCRA. Collection of Social Security numbers engages state identity theft protection statutes and data breach notification laws in all U.S. states. 2) GOVERNANCE EXPOSURE: High. Collection of Social Security numbers, driver's license numbers, and credit bureau data represents a concentration of highly sensitive identity and financial information. The notice does not specify retention periods, access controls, or deletion procedures specific to these categories, which may create exposure under state data minimization and sensitive data handling requirements. 3) JURISDICTION FLAGS: All U.S. states have data breach notification laws that specifically enumerate Social Security numbers and driver's license numbers as triggering categories. California CPRA designates Social Security numbers as sensitive personal information with associated opt-in consent requirements for certain uses. GDPR and UK GDPR impose heightened processing requirements for national identification numbers. 4) CONTRACT AND VENDOR IMPLICATIONS: Third-party service providers receiving access to Social Security numbers, driver's license numbers, or credit history data should be subject to data processing agreements with explicit use limitations. Vendor assessments should confirm that access is limited to the stated purpose of identity verification or credit risk management. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether collection of Social Security numbers and driver's license numbers is limited to the specific service contexts where identity verification is legally required or operationally necessary. Data retention schedules for government-issued identifier data should be reviewed against applicable state law minimization requirements. FCRA compliance should be evaluated for any use of credit bureau data in product or service eligibility decisions.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision identifies collection of government-issued identity documents and credit history as categories of personal information Amazon may receive, which are among the most sensitive categories under U.S. consumer data protection frameworks. The notice does not specify the service contexts in which these categories are collected or the retention periods applicable to them.
The agreement discloses that Social Security numbers, driver's license numbers, and credit history information are among the categories of personal data Amazon may collect. The notice references that credit history information is received from credit bureaus and used to help prevent and detect fraud and to offer certain credit or financial services.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amazon Marketplace.