What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://www.amazon.com/privacycentral', 'difficulty': 'MODERATE', 'action_type': 'DELETE_DATA', 'instructions': "Visit Amazon's Privacy Central and submit a data deletion request to exercise your right to erasure under GDPR or CCPA; note that Amazon may retain some data for legal or business purposes.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'The FTC has authority over deceptive or inadequate data retention disclosures under Section 5 of the FTC Act.', 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Data Retention for Business Purposes clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Data Retention for Business Purposes — Amazon

Share 𝕏 Share in Share 🔒 PDF

What it is

Amazon keeps your personal data for as long as it considers necessary for business purposes or legal requirements, without specifying exact retention periods for most data categories.

Consumer impact (what this means for users)

Amazon does not commit to specific data retention periods for most personal data categories, meaning your purchase history, behavioral data, and voice recordings could be retained indefinitely under broad business justifications, which increases your long-term data breach risk.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Visit Amazon's Privacy Central and submit a data deletion request to exercise your right to erasure under GDPR or CCPA; note that Amazon may retain some data for legal or business purposes.

Cross-platform context

See how other platforms handle Data Retention for Business Purposes and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Vague retention terms mean Amazon may hold your personal data indefinitely under broad 'business purpose' justifications, limiting your ability to have data deleted and creating ongoing data breach exposure.

View original clause language

We keep your personal information to enable your continued use of Amazon Services, for as long as it is required in order to fulfil the relevant purposes described in this Privacy Notice, as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: GDPR Art. 5(1)(e) (storage limitation principle) requires data be kept no longer than necessary for specified purposes — vague 'business purpose' retention is inconsistent with this principle. CCPA/CPRA §1798.100(a)(3) requires businesses to disclose the length of time they intend to retain each category of personal information, or the criteria used to determine this. FTC Act Section 5 covers deceptive practices related to retention representations. Enforcement authorities include EU DPAs, CPPA, and the FTC.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC has authority over deceptive or inadequate data retention disclosures under Section 5 of the FTC Act.
File a complaint →

Provision details

Document information

Document

Amazon Privacy Notice

Entity

Amazon

Document last updated

April 29, 2026

Tracking information

First tracked

April 27, 2026

Last verified

April 27, 2026

Record ID

CA-P-003243

Document ID

CA-D-00027

Evidence Provenance

Source URL

https://www.amazon.com/gp/help/customer/display.html?nodeId=468496

Wayback Machine

View archived versions →

SHA-256

c3ec0243c0cce6b332e8df7d3c8e2518cd7d2e0078f5bc2fe353d6612b8a01f8

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Amazon | Document: Amazon Privacy Notice | Record: CA-P-003243
Captured: 2026-04-27 10:46:06 UTC | SHA-256: c3ec0243c0cce6b3…
URL: https://conductatlas.com/platform/amazon/amazon-privacy-notice/data-retention-for-business-purposes/
Accessed: May 2, 2026

Classification

Severity

Medium

Data Retention for Business Purposes