FTC Finalizes Order with Marriott and Starwood Requiring Them to Implement a Robust Data Security Program to Address Security Failures
Briefly

The FTC charged that Marriott and Starwood deceived consumers by claiming to have reasonable and appropriate data security, when they in fact failed to deploy reasonable security to protect consumers' personal information.
Under the order, Marriott and Starwood are required to establish a comprehensive information security program to safeguard customers' personal information, including reviewing loyalty rewards accounts upon customer request.
Read at Databreaches
[
|
]