It’s been one year since online retailer Amazon announced it was on the receiving end of the largest fine so far under the European Union’s punitive privacy legislation, but details about the decision—as well as the actual complaint—remain sketchy.

In a regulatory filing the company submitted to the U.S. Securities and Exchange Commission on July 30, 2021, Amazon said the Luxembourg National Commission for Data Protection (CNPD) issued a decision against Amazon Europe claiming the company’s processing of personal data did not comply with the General Data Protection Regulation (GDPR).

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...