Twitter Linkedin
Donate

Amazon.com, Inc.

14th

20%

Rank      Score

Headquartered in the United States, Amazon is one of the world’s largest e-commerce platforms, with more than 214.8 million monthly visitors. It also offers cloud computing, web hosting, video streaming, facial recognition software, and a personal digital assistant service, Alexa.

  • Digital Platforms
A newcomer to the ranking this year, Amazon earned the lowest score of all digital platforms in the 2020 RDR Index. In 2020, the company earned record profits, while facing continued scrutiny for falling short on respect for human rights. Amazon offered no evidence that it assesses the human rights impacts of some of its most popular services. In 2019 and 2020, investigations by researchers and journalists shed light on the company’s failures to protect users from human rights harms. Amazon’s e-commerce platform made headlines when it removed listings for products promoting the far-right Proud Boys group, and when it banned the sale of injectable drugs to protect users’ health. We found that the company failed to disclose any data around its enforcement of these content rules. When companies publish this data, it allows civil society to hold them accountable for enforcing their own rules—an area where Amazon falls short.

Key Takeaways

  • Amazon earned the second-lowest score in the governance category, after Tencent.
  • Amazon earned the second-lowest score among digital platforms in the freedom of expression and information category for having unclear (and in some cases, nonexistent) rules and being opaque about how they are enforced.
  • Amazon disclosed very little about how it handles user information, and nothing about its data retention policies.

Key Takeaways

  • Establish strong governance and oversight over human rights. Amazon should disclose more information about its human rights due diligence, including whether it conducts human rights impact assessments in association with the use and development of algorithms.
  • Increase transparency about government demands and enforcement of its platform rules. Amazon should regularly publish data about the volume and nature of actions it takes to restrict content in response to government demands or to the violation of its own rules.
  • Increase transparency about handling of user information. Amazon should provide more detail about how and for what purposes it collects, infers, and shares user information. It should also improve users’ options to control and access their own information.

Services Evaluated:

  • Amazon
  • Alexa
  • Amazon Drive

Market cap:

$1.67 trillion
(as of February 4, 2021)

NasdaqGS:

AMZN

Website:

https://www.amazon.com

The 2020 RDR Index covers policies that were active between February 8, 2019, and September 15, 2020. Policies that came into effect after September 15, 2020 were not evaluated for this Index.

Scores reflect the average score across the services we evaluated, with each service weighted equally.

Lead researchers: Veszna Wessenauer, Jie Zhang

  • Download data and sources

0%

Governance

0%

Freedom of Expresssion

0%

Privacy

We rank companies on their governance, and on their policies and practices affecting freedom of expression and privacy.

Governance: 6%

 
Amazon made a limited commitment to human rights and published some information about its appeals mechanisms, but otherwise failed to disclose any information about the other issues covered in this category.
  • Commitment to human rights: While Amazon made references to international human rights frameworks like the Universal Declaration of Human Rights in its Global Human Rights Principles, it did not specifically mention a commitment to respecting freedom of expression and information or privacy. The language used suggests that Amazon is primarily focused on human rights risks in its supply chain, but not other types of human rights (G1).
  • Human rights due diligence: Amazon provided no evidence that it conducts any type of human rights impact or risk assessments (G4a-d).
  • Stakeholder engagement: On its Sustainability Partnerships page, Amazon lists a number of external partners with which it engages, but none of these partnerships address freedom of expression and information, privacy, or potential human rights harms such as discrimination (G5).
  • Remedy: We found no evidence of a remedy mechanism for freedom of expression and information or privacy related grievances (G6a). The company disclosed the steps sellers need to follow to appeal the deactivation of their accounts and the removal of their listings. The company did not disclose options for buyers to appeal the deactivation of their accounts and removal of their comments (G6b) .

Indicators

G1. Policy commitment

0%

G2. Governance and management oversight

0%

G3. Internal implementation

0%

G4. Human rights due diligence

0%

G5. Stakeholder engagement and accountability

0%

G6. Remedy and appeals

0%

G6a. Remedy

0%

G6b. Process for content moderation appeals

0%

Freedom of Expression: 28%

 
Amazon disclosed little about its policies and practices affecting freedom of expression and information, revealing less than all other digital platforms, except for Baidu. It was the least transparent digital platform about platform rules and enforcement.
  • Content moderation: Content and account rules for Amazon.com and Amazon Drive were easy to find and understand, but Alexa’s rules were less accessible. The company failed to provide any proof that it enforces these rules (F4a, F4b).
  • Algorithmic use and content curation: Amazon did not publish a policy outlining how it uses algorithms on its services (F1d), or about if and how it uses algorithms to curate the content that users can access on either Amazon.com or Alexa (F12).
  • Advertising content and targeting: Ad content policies and targeting rules were easy to find for Amazon.com. Ad content rules for Alexa were only accessible through Amazon’s developer page, and were therefore harder to find (F1b,c). The company published no data about the enforcement of its ad content or targeting policies (F4c).
  • Censorship demands: Amazon was one of two digital platforms—along with Samsung—that failed to reveal any information about its processes for responding to government and private demands for content and account restrictions (F5a, F5b). Nor did it disclose data on the nature and volume of such requests it received and complied with (F6, F7).

Indicators

F1. Access to policies

0%

F2. Notification of policy changes

0%

F3. Process for policy enforcement

0%

F4. Data about policy enforcement

0%

F5. Process for responding to third-party requests to restrict content or accounts

0%

F6. Data about government demands to restrict for content and accounts

0%

F7. Data about private requests for content or account restriction

0%

F8. User notification about content and account restriction

0%

F9. Network management (telecommunications companies)

0%

F10. Network shutdown (telecommunications companies)

0%

F11. Identity policy

0%

F12. Algorithmic content curation, recommendation, and/or ranking systems

0%

F13. Automated software agents (“bots”)

0%

Privacy: 14%

 
Amazon earned the second-lowest privacy score among digital platforms, outperforming only Samsung. It disclosed very little about its handling of user information, and less than most other platforms about policies for keeping user data secure.
  • Handling of user data: The Amazon Privacy Notice, which applies to all of the services we evaluated, was easy to find. Out of 14 digital platforms, however, Amazon was the least transparent about how it handles user information (P3-P9). It shared nothing about its data retention policies (P6) and did not allow users to obtain a copy of their user information (P8). Amazon offered very limited options for users to exercise control over their own data. In the Amazon Advertising Preferences, users can opt out of interest-based ads, suggesting that targeted advertising is the default. Even after selecting that option, though, users may still see personalized ads, according to the policy (P7).
  • Government and private demands for user data: Amazon revealed some information about how it handles government demands for user data. In its Information Requests Transparency Report, Amazon disclosed how it responds to National Security Letter requests, but it did not provide any information about how or whether it responds to other types of non-judicial requests, such as emergency requests from law enforcement. Like other U.S. companies, Amazon did not divulge the exact number of requests received for user data under the Foreign Intelligence Surveillance Act or National Security Letters, or the actions it took in response to these requests, since it is prohibited by law from doing so (P11a). Amazon did not provide any information about how it handles private demands for user information (P10b) or the volume of such requests (P11b) it receives or complies with.
  • Security: Amazon disclosed less than most other digital platforms, except Samsung, about its policies and practices for keeping user data secure. It offered no information about protocols limiting employee access to user data (P13) and no information about its policies for responding to data breaches (P15). Amazon was one of the least transparent digital platforms about its encryption policies (P16).

Indicators

P1. Access to policies affecting users’ privacy

0%

P2. Notification of changes

0%

P3. User information collection and inference

0%

P4. Sharing of user information

0%

P5. Purpose for collecting, inferring, and sharing user information

0%

P6. Retention of user information

0%

P7. Users’ control over their own user information

0%

P8. Users’ access to their own user information

0%

P9. Collection of user information from third parties

0%

P10. Process for responding to demands for user information

0%

P11. Data about demands for user information

0%

P12. User notification about third-party requests for user information

0%

P13. Security oversight

0%

P14. Addressing security vulnerabilities

0%

P15. Data breaches

0%

P16. Encryption of user communication and private content (digital platforms)

0%

P17. Account security (digital platforms)

0%

P18. Inform and educate users about potential risks

0%

Subscribe to
our newsletter

To receive our monthly newsletter, “The Radar”, subscribe here

Support
Ranking Digital Rights

Donate
Twitter Linkedin

Media requests:

comms@rankingdigitalrights.org

Other inquiries:

info@rankingdigitalrights.org