PrivacyProof · Amazon

GDPR privacy & cookie consent for Amazon sellers: do the rules apply to you?

GDPR + the cookie rules require a clear privacy policy, lawful opt-in for non-essential cookies, and a way for people to exercise their data rights. Check yours in 60 seconds.

In force EU rules Amazon

How GDPR privacy & cookie consent works on Amazon

Amazon is a tightly-policed marketplace that pushes a lot of compliance back onto sellers through its policies — but meeting the underlying law is still yours to do. Amazon enforces, it doesn't comply on your behalf.

📦 On Amazon: Amazon requires GPSR compliance data and a responsible person for EU listings, but the labeling, documentation and product-safety substance is the seller's responsibility.

Does this apply to you?

This rule applies to Amazon sellers who collect personal data from visitors in the EU or UK. Collect data from EU/UK visitors? Check your privacy policy, cookie consent, and data-rights handling. Not sure? The free checker tells you in about a minute — no signup.

The Amazon checklist

Whatever the platform handles, you still need to be able to answer "yes" to each of these — these are the points Amazon sellers most often get caught on:

What's at stake

⚠️ Exposure: up to €20M or 4% of global turnover (Art. 83) · Status: In force. On Amazon, that's on top of any account suspension for breaking platform policy.

Compare the penalty for every rule →

Common questions

Do I have to handle gDPR privacy & cookie consent myself on Amazon, or does Amazon cover it?

Amazon gives you the storefront, but gDPR privacy & cookie consent compliance is the seller's responsibility — the platform doesn't do it for you. The free checker shows exactly where you stand in about a minute.

Do I need a cookie consent banner?

If you serve EU/UK visitors and use any non-essential cookies (analytics, advertising), yes — they must load only after the visitor opts in, with a Reject option as easy as Accept.

What must a GDPR privacy policy include?

What data you collect, why, the lawful basis, who you share it with, how long you keep it, international transfers, and how to exercise data rights — in plain language, available at collection.

What are the GDPR fines?

Up to €20 million or 4% of global annual turnover, whichever is higher — plus regulator orders and reputational damage.

The source

RuleGoose checks this against the EU GDPR (Reg. (EU) 2016/679), UK GDPR + ePrivacy/cookie rules. Read it yourself: EUR-Lex — Regulation (EU) 2016/679 →

Check your Amazon store against GDPR privacy & cookie consent — free.
Answer a few questions, see exactly where you're exposed, and draft the fix. No signup, runs in your browser. Run the PrivacyProof checker →

or get one RuleGoose Score across every rule your Amazon store has to meet.

The full Amazon picture

GDPR privacy & cookie consent is one of several rules a Amazon store has to meet. See the full Amazon compliance checklist →, or read the platform-neutral GDPR privacy & cookie consent guide.

Same rule, other platforms

Informational only, not legal advice, and not affiliated with the EU or Amazon. Last reviewed 2026-06-30.