Intention to fine Marriott more than £99M under GDPR for data breach
Admittedly, I don't know the specifics e.g. if there was <i>obvious</i> negligence. However, this seems like a <i>major</i> fine for a security vulnerability. The statement given in the article is:<p>> <i>Personal data has a real value so organisations have a legal duty to ensure its security, just like they would do with any other asset. If that doesn’t happen, we will not hesitate to take strong action when necessary to protect the rights of the public</i><p>Certainly, calling out poor security practices is a good thing, however this level of scrutiny is going to require a major shift in mentality for a large portion of the industry. "Move fast and break things" just isn't going to cut it anymore.