Marriott may be the first organization to feel the full force of the EU’s General Protection Regulation potential penalties over a breach that appears to have exposed up to 500 million individuals’ personal details. It’s unclear how privacy regulators might impose sanctions for breaches that began before GDPR came into effect, but which persisted after May 25. Experts say that any breach that spans May 25 will fall under EU privacy regulators’ purview. Marriott believes that its Starwood database breach exposed information on 327 million individuals worldwide.”]
Source: https://www.inforisktoday.com/blogs/marriott-mega-breach-will-gdpr-apply-p-2688