Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The notice discloses that Amazon's physical retail locations use cameras, computer vision systems, sensors, and related technology to collect data about customer activity, including product interactions within the store.
This analysis describes what Amazon Marketplace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of behavioral and potentially biometric-adjacent data in physical store environments without specifying distinct consent mechanisms, retention periods, or opt-out procedures beyond general service use consent. The scope of this collection may require evaluation under state biometric privacy statutes and consumer health data laws depending on the jurisdiction in which stores operate.
Interpretive note: The extent to which cameras and sensors collect biometric data as legally defined under state statutes versus general behavioral activity data is not specified in the notice, creating interpretive uncertainty about applicable regulatory obligations.
The agreement establishes that physical store visits may result in collection of activity data through cameras, sensors, and computer vision systems. The notice does not specify a separate opt-out mechanism for in-store data collection distinct from the general choice not to use Amazon Services.
Cross-platform context
See how other platforms handle In-Store Camera, Sensor, and Computer Vision Data Collection and similar clauses.
Compare across platforms →Monitoring
Amazon Marketplace has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Our physical stores may use cameras, computer vision, sensors, and other technology to gather information about your activity in the store, such as the products and services you interact with.Excerpt from Amazon Marketplace's Amazon Privacy Notice
1) REGULATORY LANDSCAPE: This provision may require evaluation under the Illinois Biometric Information Privacy Act, the Washington My Health MY Data Act, the Texas Capture or Use of Biometric Identifier Act, and similar state statutes that impose notice, consent, and retention requirements for biometric or biometric-adjacent data. The FTC Act's prohibition on unfair or deceptive practices is also relevant if in-store disclosures are determined to be insufficient relative to the scope of data collected. No specific EU or UK GDPR article is cited in the document, but the Data Privacy Framework participation noted elsewhere suggests EU residents' data may also be subject to this collection when visiting U.S. physical locations. 2) GOVERNANCE EXPOSURE: High. The notice discloses camera, computer vision, and sensor-based in-store data collection in a single sentence without specifying data categories collected, retention schedules, consent mechanisms, or jurisdiction-specific procedures. This disclosure structure may be insufficient under state biometric privacy statutes that require written consent prior to collection. 3) JURISDICTION FLAGS: Illinois, Washington, and Texas create heightened exposure given their biometric privacy statutes. California's CCPA and CPRA may also apply to behavioral data collected in physical retail environments. EU and UK GDPR may apply to data collected from EU or UK residents visiting U.S. stores, depending on Amazon's data controller determinations. 4) CONTRACT AND VENDOR IMPLICATIONS: Vendors and technology providers supplying camera, computer vision, or sensor systems to Amazon stores may be subject to data processing agreements. Procurement teams should assess whether those vendor contracts include appropriate data handling obligations aligned with applicable biometric and consumer privacy statutes. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether point-of-entry notices in physical stores satisfy state-specific consent and disclosure requirements for biometric or activity data collection. Data mapping exercises should identify the categories of data collected through in-store technology, associated retention periods, and third-party access rights.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision authorizes collection of behavioral and potentially biometric-adjacent data in physical store environments without specifying distinct consent mechanisms, retention periods, or opt-out procedures beyond general service use consent. The scope of this collection may require evaluation under state biometric privacy statutes and consumer health data laws depending on the jurisdiction in which stores operate.
The agreement establishes that physical store visits may result in collection of activity data through cameras, sensors, and computer vision systems. The notice does not specify a separate opt-out mechanism for in-store data collection distinct from the general choice not to use Amazon Services.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amazon Marketplace.