Amazon Road Transport Spain S.L. – €2,000,000 Fine (Spain, 2022)

€2,000,000Agencia Española de Protección de Datos11 February 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Spain's data protection authority fined Amazon Road Transport Spain S.L. EUR 2 million for improperly handling drivers' criminal record data. Amazon Road required these records without a valid legal basis, violating GDPR rules. This case emphasizes the importance of having a legal basis for processing sensitive data.

What happened

Amazon Road required drivers to provide criminal record certificates without a valid legal basis under GDPR.

Who was affected

Drivers applying for positions at Amazon Road Transport Spain S.L., whose criminal record data was improperly processed.

What the authority found

The Spanish DPA found that Amazon Road processed criminal record data without a valid legal basis, violating GDPR Article 10.

Why this matters

This case highlights the need for companies to ensure they have a valid legal basis when processing sensitive data like criminal records. It serves as a warning to businesses to carefully review their data processing practices to avoid hefty fines.

GDPR Articles Cited

AI-verified

Art. 10 GDPR
Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR
Art. 10 GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 10 LOPDGDD
Source verified 5 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has fined Amazon Road Transport Spain S.L. EUR 2,000,000. The AEPD had received a complaint from a trade union against the company. Amazon Road required certificates confirming the absence of criminal records when hiring drivers. Amazon Road believed that these certifications were not subject to Art. 10 GDPR. However, contrary to Amazon Road's interpretation, the AEPD determined that these data do fall under Art. 10 GDPR. During its investigation, the AEPD concluded that the processing of these data consequently did not comply with the requirements of Art. 10 GDPR. For this reason, the DPA came to the conclusion that Amazon Road had processed the data on the absence of criminal records without a valid legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for Amazon Road Transport Spain S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

11 February 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€2,000,000

Enforcement Tracker ID

ETid-1073

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Amazon Road Transport Spain S.L. - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: