- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Neil Hodge2024-02-07T18:03:00
The decision by France’s data regulator to fine an Amazon warehouse manager for breaches of the European Union’s privacy law over the way the company monitored employee productivity raises questions about the reach data protection authorities (DPA) have over corporate conduct—and whether they can cope with a possible increase in demand.
On Jan. 23, the CNIL announced it fined Amazon France Logistique 32 million euros (then-U.S. $35 million) over the way it tracked employees as they worked. The regulator’s main concerns were that Amazon’s use of tracking technologies and collection and retention of data was excessive and that other, less intrusive methods could have been used instead.
The CNIL also found employees were not properly informed about the extent of the monitoring until 2020—nearly two years after the General Data Protection Regulation (GDPR) came into force. It noted that by breaking the law and squeezing workers to work harder and faster, Amazon could have secured an unfair advantage over its rivals.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
The French data regulator’s fine against an Amazon warehouse manager for violating employees’ rights to privacy in the workplace once again raises questions about what constitutes an overzealous approach to employee monitoring and why companies fail to recognize the signs.
Amazon’s warehouse management arm in France was assessed a penalty of €32 million (U.S. $35 million) for violating the General Data Protection Regulation by excessively tracking the productivity of employees.
Recent fines in Italy against two food delivery companies for violating the privacy of their drivers should act as a warning that employee surveillance can prove to be a major breach of the General Data Protection Regulation.
The European Union’s Digital Markets Act is forcing many Big Tech companies to postpone the launch of artificial intelligence-powered features, like Apple Intelligence, over user privacy and data security concerns.
Location-based dating apps are not doing enough to protect user privacy, with exact location and other personal data being exploited by stalkers and bad actors, a recent analysis found.
Michael Macko, deputy director of enforcement at the California Privacy Protection Agency, described priorities for the agency now and in the near future during a recent board meeting.
