{"id":2181,"date":"2018-11-26T07:00:09","date_gmt":"2018-11-26T13:00:09","guid":{"rendered":"http:\/\/blogs.luc.edu\/compliance\/?p=2181"},"modified":"2018-11-26T07:00:09","modified_gmt":"2018-11-26T13:00:09","slug":"amazon-go-versus-the-gdpr","status":"publish","type":"post","link":"https:\/\/blogs.luc.edu\/compliance\/?p=2181","title":{"rendered":"Amazon Go versus the GDPR"},"content":{"rendered":"

Dhara Shah<\/em><\/p>\n

Associate Editor<\/em><\/p>\n

Loyola University Chicago School of Law, JD 2020<\/em><\/p>\n

New data privacy regulations entail questioning both current and future technologies. Recently, Amazon has introduced a store concept that eliminates everyone\u2019s least favorite things about shopping, long lines and small talk. Amazon Go<\/a> is the grocery store of the future and these stores allow consumers to walk in, pick up the items that they need, and then walk right back out. That\u2019s it. No long lines, no cashiers, no shopping carts. However, as great as this concept seems, there are still concerns from a data privacy standpoint as Amazon needs to collect personal data from its consumers in order to be able to lawfully execute these checkout-less stores.<\/p>\n

<\/p>\n

What Data is Collected?<\/strong><\/p>\n

Collecting data is a controversial practice. However, Amazon Go\u2019s collection of data transcends this issue to a new plane. In order to function as a \u201cgrab and go,\u201d Amazon must not only collect basic information such as transaction data, but also collect information pertaining to how <\/em>the consumer shops<\/a>. This means recording and calculating every item the consumer picks up and decides to put back, the aisles walked down, and how often certain areas of the store are visited. While this isn\u2019t the first thing that the average customer thinks is being collected and they may not raise an issue, it is still very important for companies to consider as General Data Protection Regulation<\/a> (GDPR) and GDPR-like laws are introduced across the world.<\/p>\n

What Data is \u201cNormally\u201d Collected?<\/strong><\/p>\n

The main argument of Amazon supporters is that the data being collected through Amazon Go does not exceed what is already being collected through loyalty programs and credit cards at traditional grocery stores. Under Amazon\u2019s practice, information is being collected in a different way and all by one company while in traditional grocery stores information is arguably at a higher risk with it being collected and stored by a variety of companies, ranging from the store to the loyalty program.<\/p>\n

A large concern also exists with the false rumor that Amazon is employing facial-recognition software in their new stores. However, Amazon has specifically stated that it does not employ facial-recognition software<\/a>, and the information that is collected is also collected during traditional modes of shopping \u2013 no new data is being collected for this new technology.<\/p>\n

How does the GDPR affect Amazon Go?<\/strong><\/p>\n

The GDPR must be considered when analyzing if this method of data collection meets compliance standards or if it breaks data privacy laws. The GDPR mandates that data collection should satisfy at least one of the six legal grounds. The most important and relevant<\/a> legal grounds to Amazon Go are seen to be (a) consent, (b) that the processing is necessary for the performance of a contract, and (f) a legitimate interest.<\/p>\n

The GDPR requires consumer consent for data collection to have the upmost transparency. Amazon meets this requirement with a \u201cTerms of Service\u201d for the consumer to view and agree to when signing up for an Amazon Prime account, which is necessary to shop at an Amazon Go store. Part (b) GDPR also allows for data collection when the processing of data is necessary for the performance of a contract. Amazon\u2019s usual methods of data collection and use regarding their online store are perfectly legal, thus it follows that no issues should be raised for the Amazon Go stores. Both of these different shopping platforms track and process the user\u2019s \u201cfootprint\u201d, or how they use the store \u2013 whether online or in person, in order to better the user\u2019s experience and service use overall.<\/p>\n

Amazon\u2019s legitimate interest in collecting user data is also an area of contention. Amazon can be seen to have a legitimate interest<\/a> in tracking what a user buys in order to properly function as a \u201cgrab and go\u201d store. However, does such an interest extend to the collection of user data to help improve the service the company is providing? As the GDPR and other data privacy laws go into effect, the answer to this question will become clearer. However, for now, it has been argued that Amazon does have a legitimate interest in not only collecting and tracking user data, but also in analyzing and implementing it to enhance the quality of its service. Amazon thrives not only because of its ability to provide a wide range of products to consumers, but because its data collection practices enable the consumer to always see and find the products they want through its service. In order to make this happen, collection and analysis of user data can be seen to have a legitimate interest.<\/p>\n

This \u201cgrab and go\u201d grocery store of the future that Amazon has pioneered will only continue to expand. Sam\u2019s Club has already unveiled \u201cSam\u2019s Club Now\u201d<\/a> which implements a concept similar to Amazon to help streamline the user\u2019s experience within the store. While more companies adapt and expand their technological reach, the law will need to continue to grow as well. As more data privacy regulations are introduced to compliment the GDPR, companies must keep the specific requirements in mind to ensure that their new technologies are implemented to comply with such laws.<\/p>\n","protected":false},"excerpt":{"rendered":"

New data privacy regulations entail questioning both current and future technologies. Recently, Amazon has introduced a store concept that eliminates everyone\u2019s least favorite things about shopping, long lines and small talk. Amazon Go is the grocery store of the future and these stores allow consumers to walk in, pick up the items that they need, and then walk right back out. That\u2019s it. No long lines, no cashiers, no shopping carts. However, as great as this concept seems, there are still concerns from a data privacy standpoint as Amazon needs to collect personal data from its consumers in order to be able to lawfully execute these checkout-less stores.<\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[165,166,280,468,566,573,936,1205,1622,1623,1690,1769,2062],"class_list":["post-2181","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-amazon","tag-amazon-go","tag-big-data","tag-compliance","tag-data","tag-data-regulation","tag-gdpr","tag-journal-of-regulatory-compliance","tag-privacy","tag-cybersecurity","tag-regulation","tag-sams-club","tag-us"],"_links":{"self":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/2181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2181"}],"version-history":[{"count":0,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/2181\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}