The notice states that Amazon participates in the EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework, which are mechanisms for lawful transfer of personal data from the EU, UK, and Switzerland to the United States.
This analysis describes what Amazon Marketplace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Participation in these frameworks establishes the legal transfer mechanism Amazon asserts for personal data flows from the EU, UK, and Switzerland to the United States, and subjects Amazon to the frameworks' dispute resolution and enforcement obligations administered by the Department of Commerce and FTC.
The updated privacy notice explicitly discloses that Amazon uses machine learning and artificial intelligence to support and enhance customer experience, including developing and deploying generative AI models and services. Under the revised policy, your personal information may be used for these AI development purposes. Amazon added a reference to its Generative AI Development Disclosure for additional details on how data is used in this context. You can review the Generative AI Development Disclosure linked in the updated privacy notice for more specific information about AI model development.
View change record →The agreement discloses that Amazon relies on the EU-US Data Privacy Framework and its UK and Swiss extensions as the basis for transferring personal data from the EU, UK, and Switzerland to the U.S. EU, UK, and Swiss residents whose data is transferred under these frameworks are entitled to recourse through the frameworks' complaint and arbitration mechanisms.
Cross-platform context
See how other platforms handle EU-US Data Privacy Framework Participation and similar clauses.
Compare across platforms →"Amazon.com, Inc. participates in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework.Excerpt from Amazon Marketplace's Amazon Privacy Notice
1) REGULATORY LANDSCAPE: The EU-US Data Privacy Framework was established following the European Commission's adequacy decision and is administered by the U.S.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Participation in these frameworks establishes the legal transfer mechanism Amazon asserts for personal data flows from the EU, UK, and Switzerland to the United States, and subjects Amazon to the frameworks' dispute resolution and enforcement obligations administered by the Department of Commerce and FTC.
The agreement discloses that Amazon relies on the EU-US Data Privacy Framework and its UK and Swiss extensions as the basis for transferring personal data from the EU, UK, and Switzerland to the U.S. EU, UK, and Swiss residents whose data is transferred under these frameworks are entitled to recourse through the frameworks' complaint and arbitration mechanisms.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amazon Marketplace.