Intention to fine Marriott more than £99M under GDPR for data breach

Re:Intention to fine Marriott more than £99M under GDPR for ... by crumpets on Tuesday July 09, 2019 @12:02PM (#20393165)

>ensure its security, just like they would do with any other asset.

This motivation is asinine. Record leaks don't do anything to harm the original records and it's not like Marriott's secret sauce is a list of customer records. Companies don't protect assets from things that don't cause the assets harm.

Personal data does not have value to the company in that regard. It's a liability more than an asset.

[ Parent | on HN ]

Re:Intention to fine Marriott more than £99M under GDPR for ... by formercoder on Tuesday July 09, 2019 @12:07PM (#20393249)

The definition of an asset is something that provides probable future economic value to the firm. Personal data seems to fall under this category to me.

[ Parent | on HN ]

Re:Intention to fine Marriott more than £99M under GDPR for ... by marcus_holmes on Tuesday July 09, 2019 @12:37PM (#20393629)

Hopefully this fine will help wake the industry up to the fact that this asset comes with considerable regulatory costs, and that those costs may well be more than the value of the asset.

Hopefully that will stop them hoarding personal data.

GDRP is working as intended :)

[ Parent | on HN ]

Re:Intention to fine Marriott more than £99M under GDPR for ... by amputect on Tuesday July 09, 2019 @01:42PM (#20394528)

If personal data doesn't have value to the company and it's not an asset, then the company shouldn't be collecting and storing it. Making storing personal data a liability is good if the goal is to prevent companies from storing personal data unless there's a strong business need (and corresponding level of care) involved.

[ Parent | on HN ]