Board Decision about Marriott International Inc.
Personal Data Protection Board Decision No. 2019/143 of 16/05/2019 about Marriott International Inc.
As a result of examination regarding the data breach, which causes large number of data violation, lasted approximately 4 years and shows that the system is problematic by design, and notified to the Board in 03.12.2018, the Board decided;
1- to impose an administrative fine of 1.100.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law.
2- to impose an administrative fine of 350.000 TL to the Company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.