There is precedent of weaponizing email data against the company sending the emails, though.[0] This definitely seems like a move that's in Amazon's best interest.

I have not heard about regulations like what you're describing.

[0] https://www.nytimes.com/2017/04/24/technology/personal-data-...