Marriott hack hits 500M Starwood guests

Re:Marriott hack hits 500M Starwood guests by blacksmith_tb on Friday November 30, 2018 @02:00PM (#18571605)

It appears that the maximum fine is 4% of a corporation's global earnings[1] which could be a lot of money, but still "just a cost of doing business" at the same time.

1: https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

[ Parent | on HN ]

Re:Marriott hack hits 500M Starwood guests by isostatic on Friday November 30, 2018 @02:08PM (#18571696)

Global turnover. "Earnings" tends to mean profit.

Uber is somewhere around $10b gross revenue, so $400m fine for every breach. Sure it's "just a cost of doing business". It also means that it's better to spend $200m beefing up their security to reduce from 1 data breach every year to one every 5 years.

Marriot revenue is $23b, so that's a potential $920m fine.

IHG (say), who invest in security and don't have a breach, get to charge less for their hotels, or make more profit.

[ Parent | on HN ]

Re:Marriott hack hits 500M Starwood guests by nkkollaw on Friday November 30, 2018 @02:46PM (#18572013)

I thought the same thing, but I was corrected here on HN: if you read the same exact like you posted, it says "a fine up to €20 million or up to 4% of the annual worldwide turnover of the preceding financial year in case of an enterprise, whichever is greater", so the they ARE allowed to fine you EUR 20 million.

Much more than "just a cost of doing business" for the majority of companies.

[ Parent | on HN ]