Marriott International Inc.
- Country
- Turkey
- Fine
- 1,450,000 TRY
- Date
- 2019-05-16
- Sector
- Private Sector
- Articles
- Article 12 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to notify the DPA within the necessary timelimit
A fine of 1.450.000,00 TL was issued as a result of a data breach possibly affecting 1.24 million people in Turkey by Marriott International Inc. The breach was caused because of an unlawful access to database of Starwood Hotels for nearly 4 years, leaking personal data including financial information of data subjects. The KVKK has issued a penalty based on lack of technical and organisational measure and the delay of notification to the DPA for nearly 3 months. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5479/2019-143
Reported by: Mehmet Gün