Information Commissioners Office (ICO) issued a fine notice to Marriott for 2018 data breach. Approximately 339 million guest records were exposed globally. 30 million related to residents records of 31 countries in the European Economic Area (EEA) Seven million records related to UK residents. Information Commissioner Elizabeth Denham said, The GDPR makes it clear that organisations must be accountable for the personal data they hold. This can include carrying out proper due diligence when making a corporate acquisition, and putting in place proper accountability measures to assess what personal data has been acquired, but also how it is protected.”]
Source: https://gbhackers.com/marriott-international-gdpr-fine/