They did not disclose any of the following as specified by the data breach notification requirements of the GDPR: The name and contact details of the data prot

They did not disclose any of the following as specified by the data breach notification requirements of the GDPR: The name and contact details of the data protection officer or other contact point where more information can be obtained The likely consequences of the personal data breach The measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects The are also required to submit the following information to EU authorities, but have given no indication that they have done so or are planning to: The categories and approximate number of data subjects concerned The categories and approximate number of personal data records concerned The mail that Amazon sent to affected customers was barebones and contained almost no information.