data report card

Data Report Card · Amazon

Amazon Data Report Card

Amazon account · Alexa
§ Enforcement action
Data
Practices
2Access1Portability1Friction1Deletion1Sells0Trains AI
=
D
§
4/12
Agent
Readiness
2Access 1Portability 0API access
=
C
3/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 6/12 on data practices − 2 = 4/12 → D. The enforcement record is below.

Help me make a request →
Reviewed Jun 2026 · policies are checked weekly for changes  ·  stated — every cell is read from Amazon's published policy; none has been tested (run by us) yet.
2Accessstated
"Request your personal information" is a clearly documented request covering all major categories, no fee.
Amazon — request your information · accessed Jun 2026 ↗
1Portabilitystated
Request-based export in mixed formats — some .json/.csv, much PDF/HTML — not a single structured archive.
Amazon — request your information · accessed Jun 2026 ↗
1Frictionstated
Request flow with email validation; Amazon says it "may take up to one month" to deliver, with secure-link back-and-forth.
Amazon — request your information · accessed Jun 2026 ↗
1Deletionstated
Self-serve "close your account and delete my data" flow with a 5-day verification reply, but the scope of deletion and backup/derived-data retention is not clearly stated.
Amazon — close your account · accessed Jun 2026 ↗
1Sells / sharesstated
Runs a large advertising business and shares data with third-party sellers; a state-specific (CCPA) opt-out is findable.
Amazon — state-specific privacy disclosures · accessed Jun 2026 ↗
0Trains AIstated
Uses Alexa interactions to train its models. On March 28, 2025, Amazon removed the "Do Not Send Voice Recordings" option, citing "generative AI features that rely on the processing power of Amazon's secure cloud" — voice now always goes to the cloud, with no opt-out from cloud processing.
Amazon — Alexa, Echo & your privacy · accessed Jun 2026 ↗
§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored C (6/12)verified
The FTC and DOJ charged Amazon $25 million in May 2023 for keeping children's Alexa voice recordings indefinitely and undermining parents' deletion rights under COPPA.
US Federal Trade Commission · 31 May 2023 ↗
0API access — feeds Agent Readiness, not the /12stated
Getting your Amazon and Alexa data is a manual "Request Your Data" web form, emailed back as files — there is no consumer API for an authorized agent to fetch order or voice history on a schedule.
Amazon — Request Your Data · accessed Jun 2026 ↗
Source-verified Jun 2026 from Amazon's own pages. All cells are "stated" (read from published policy and help docs); we have not yet run a live request or account closure to mark any cell "tested."

Events

Breaches, policy changes, and export-format changes we’ve recorded at Amazon — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

No events on record for Amazon.

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

No changes since this grade was first published in Jun 2026.

How to request your data from Amazon

  1. Go to https://www.amazon.com/hz/privacy-central/data-requests/preview.html — Amazon's data-request entry point.
  2. Privacy Central → Request My Data → select categories → Submit Request.
  3. Expected wait: up to one month — Amazon's stated turnaround (we haven't independently timed a request yet).

These steps reflect Amazon's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.

Help me make a request →