Dutch Foundation Sues Amazon Over Alleged Data Misuse
The Dutch Data Protection Foundation (Stichting Data Bescherming Nederland) has filed a collective lawsuit on behalf of millions of Dutch Amazon users, alleging that the company collects and sells personal data without clear consent.
The case falls under the Dutch Act on the Settlement of Mass Damages in Collective Action (WAMCA), while the General Data Protection Regulation (GDPR) imposes its own distinct requirements. The central question: can an interest group claim damages without each individual member’s explicit consent?
In an interim judgment on 23 July 2025, the Rotterdam District Court referred questions to the Court of Justice of the European Union (CJEU). The CJEU must determine whether the Netherlands may impose stricter rules than the GDPR and how Article 80 GDPR should be interpreted. The substantive proceedings will only resume after these preliminary questions are answered. The outcome could have major implications for other claims against tech giants such as Adobe, X (formerly Twitter), and Oracle. The case is expected to remain on hold for at least another year and a half.
Legal and Practical Impact
At Data & Business Legal, I closely follow these developments. As a specialist in privacy, IT, and corporate law, I assist companies in complying with the GDPR and advise both consumers and organizations seeking to exercise their rights.
The ruling in this case could shape how easy, or difficult, it will be to seek collective compensation for data misuse in the future.
Would you like to know what this means for your organization or your personal privacy rights? Feel free to share your thoughts below or get in touch for tailored legal advice.
