Originally Posted by
markle
So Marriott found out about this on September 10, and waited until November 30 to notify customers? I wonder if they were quicker than that to notify regulators - especially given the reporting requirements under GDPR:
Will be interesting to see how regulators respond. Fines can be up to 2% of worldwide turnover, and it's interesting to note that Marriott have made an 8-K filing in relation to the breach.
2% or 4% of global revenue?
It sounds to me like people should consider that there was some negotiations going on behind the scenes.