Call us now:
The Federal Trade Commission, 49 states and district of Columbia have reached separate settlements with Marriott International following the 2019 hack and data breach. The hack made the headlines as it was one of the first hacks to be tried under GDPR by the UK Government. At the time it was voiced that the UK ICO would seek to Marriott £99million, instead of the £18million it was fined.
‘The FTC does not have legal authority to obtain civil penalties in this case.’
The FTC reached agreement that Marriott would implement a robust information security program for failing to implement reasonable data security; provide U.S citizens a way to delete personal data and review its loyalty program. In a separate multistate agreement led by the Attorney General (AG) of Connecticut and 50 state AGs, Marriott agreed to pay a $52million penalty to states.
https://lnkd.in/eBwzRc6C
The recent fine demonstrates that cyberattacks and data breaches have a long memory and can be bought by Federal and State government. Restitution comes with both financial penalties and oversight from regulators in the form of remediation programs, that could be by a syndicate of U.S States.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC Federal Trade Commission Marriott International
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7250389404790198272