The Federal Trade Commission (FTC) has imposed two separate fines on Amazon totaling $27.25 million, targeting the company's failure to protect children's privacy through its Alexa voice assistant and its refusal to provide identity theft victims with crucial records. The settlements underscore growing regulatory pressure on Big Tech over data handling and consumer protection.
Alexa Violations: $25 Million Fine
Amazon agreed to pay $25 million to settle allegations that it violated the Children's Online Privacy Protection Act (COPPA) by retaining children's voice recordings and location data indefinitely without parental consent. The FTC claimed that Amazon used the data to train its algorithms, exposing children to privacy risks.
“Amazon’s practices put children’s privacy at risk and violated federal law,” said FTC Bureau of Consumer Protection Director Samuel Levine. “Companies must respect COPPA’s requirements.”
The settlement, first reported by Variety, requires Amazon to delete inactive child accounts and geolocation data, and prohibits using children's data for algorithm training without consent. Amazon stated it disagreed with the allegations but settled to avoid litigation.
Identity Theft Record Failures: $2.25 Million Fine
In a separate action, the FTC fined Amazon $2.25 million for violating the Fair Credit Reporting Act (FCRA) by failing to provide identity theft victims with records of fraudulent transactions. According to the FTC complaint, victims faced a “Kafkaesque” process: Amazon required them to identify the fraudster before releasing any information, making it nearly impossible to prove theft.
The Verge reported that in one case, a victim spent months trying to get records, only to be told they needed to name the person who opened the account. The FTC order mandates Amazon to provide records within 30 days of a verified request and to train staff on FCRA compliance.
Broader Context and Implications
These fines are part of a larger pattern of FTC enforcement against tech giants. CSO Online notes that Amazon's penalties join a list of major data breach fines, including Facebook's $5 billion settlement in 2019. MarketWatch and Morningstar reported that the $2.25 million fine is relatively small but sends a signal about the importance of consumer rights.
Consumer advocates argue that the fines are insufficient given Amazon's $574 billion market cap. However, the FTC's actions force Amazon to change practices, such as deleting child data and streamlining fraud assistance. The settlements also highlight the tension between innovation and privacy, especially with voice assistants like Alexa becoming ubiquitous in homes.
What This Means for Consumers
For Alexa users, the settlement means better control over children's data: parents can now request deletion of recordings and location history. For identity theft victims, Amazon must now provide transaction records without demanding the fraudster's name, easing the burden on those seeking to clear their names.
Amazon has not admitted wrongdoing in either case but has agreed to implement compliance measures. The company faces continued scrutiny from regulators worldwide, including the European Union, which is drafting new digital rules.
As tech companies collect ever more data, these cases serve as a reminder that privacy protections are not optional. The FTC's actions may prompt other firms to review their data practices, especially regarding children and fraud victims.
