A day after British Airways was put on notice of a record £183 million fine over a data hack, Marriott International was facing a £99 million penalty yesterday for breaching data protection law.
The Information Commissioner’s Office, Britain’s data privacy authority, said that it had issued a notice of its intention to fine one of the world’s biggest hotel companies for infringements of the General Data Protection Regulation.
Marriott, which has more than 7,000 hotels under brands including Ritz-Carlton, Sheraton and Le Méridien, said that it deeply regretted the incident and had co-operated in the investigation, adding that it “intends to respond and vigorously defend its position”.
The commissioner’s office said that the proposed fine related to a “cyber- incident” reported to it by Marriott