Marriott’s Data Debacle: FTC Demands Security Overhaul After Massive Breaches
The FTC has ordered Marriott International and Starwood Hotels to boost customer data security following major breaches. They’ve got 180 days to implement the required measures or risk further divine punishment—or at least another FTC slap on the wrist. Because nothing screams “hospitality” like safeguarding your guests’ data from cyber marauders!
Hot Take:
Looks like Marriott’s cybersecurity strategy was more “hotel lobby” than “Fort Knox.” The FTC has finally checked in to ensure that their guest data security isn’t on vacation. With a new order in place, Marriott and Starwood have a lot of housekeeping to do in the realm of cybersecurity. Better late than never, but let’s hope they don’t leave the “Do Not Disturb” sign on this time!
Key Points:
- The FTC has mandated Marriott and Starwood to implement a comprehensive information security program.
- Key measures include encryption, multi-factor authentication, and incident response plans.
- Marriott must allow U.S. consumers to request deletion of their personal information.
- The order is effective for 20 years, with independent assessments every two years.
- Marriott’s past data breaches impacted 344 million customers globally.
Already a member? Log in here