Data Report Card · Amazon
Amazon Data Report Card
Amazon account · Alexa
§ Enforcement action
Data
Practices
Practices
2Access1Portability1Friction1Deletion1Sells0Trains AI
=
D
§
4/12
Agent
Readiness
Readiness
2Access
1Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 6/12 on data practices − 2 = 4/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Amazon's published policy; none has been tested (run by us) yet.
2Accessstated
"Request your personal information" is a clearly documented request covering all major categories, no fee.
Amazon — request your information · accessed Jun 2026 ↗1Portabilitystated
Request-based export in mixed formats — some
Amazon — request your information · accessed Jun 2026 ↗.json/.csv, much PDF/HTML — not a single structured archive.1Frictionstated
Request flow with email validation; Amazon says it "may take up to one month" to deliver, with secure-link back-and-forth.
Amazon — request your information · accessed Jun 2026 ↗1Deletionstated
Self-serve "close your account and delete my data" flow with a 5-day verification reply, but the scope of deletion and backup/derived-data retention is not clearly stated.
Amazon — close your account · accessed Jun 2026 ↗1Sells / sharesstated
Runs a large advertising business and shares data with third-party sellers; a state-specific (CCPA) opt-out is findable.
Amazon — state-specific privacy disclosures · accessed Jun 2026 ↗0Trains AIstated
Uses Alexa interactions to train its models. On March 28, 2025, Amazon removed the "Do Not Send Voice Recordings" option, citing "generative AI features that rely on the processing power of Amazon's secure cloud" — voice now always goes to the cloud, with no opt-out from cloud processing.
Amazon — Alexa, Echo & your privacy · accessed Jun 2026 ↗§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored C (6/12)verified
The FTC and DOJ charged Amazon $25 million in May 2023 for keeping children's Alexa voice recordings indefinitely and undermining parents' deletion rights under COPPA.
US Federal Trade Commission · 31 May 2023 ↗0API access — feeds Agent Readiness, not the /12stated
Getting your Amazon and Alexa data is a manual "Request Your Data" web form, emailed back as files — there is no consumer API for an authorized agent to fetch order or voice history on a schedule.
Amazon — Request Your Data · accessed Jun 2026 ↗Source-verified Jun 2026 from Amazon's own pages. All cells are "stated" (read from published policy and help docs); we have not yet run a live request or account closure to mark any cell "tested."
How to request your data from Amazon
- Go to https://www.amazon.com/hz/privacy-central/data-requests/preview.html — Amazon's data-request entry point.
- Privacy Central → Request My Data → select categories → Submit Request.
- Expected wait: up to one month — Amazon's stated turnaround (we haven't independently timed a request yet).
These steps reflect Amazon's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.