Fine · United Kingdom
Marriott International Inc: GBP 18,400,000
- Authority
- Information Commissioner's Office (United Kingdom)
- Country
- United Kingdom
- Date
- Decision of 30 October 2020
- Amount
- GBP 18,400,000, as imposed (not converted)
- Appeal status
- Unknown
- Provisions cited
- Article 5(1)(f), Article 32
What the fine was for (summary, not the official text)
Starwood's systems, compromised in 2014 and later acquired by Marriott, were not detected as breached until September 2018; security of guest data was inadequate.
Checked against the official source on 28 October 2026.
Only the authority's decision is authoritative. This is reference material, not legal advice.