Three Data Privacy Lessons Learned From The Marriott Data Breach

Enforcement of data privacy laws across the US is in full force. Most recently, Marriott agreed to a $52 million settlement payment to 50 states, including $3.5 million to the State of Texas, following a data breach of 131 million guest records, including information such as contact information, gender, dates of birth, as well as a limited number of unencrypted passport numbers and unexpired payment card information.

In a press release announcing the Marriott settlement, Texas Attorney General Ken Paxton said "Texas law is clear that companies in possession of Texans' personal information have a duty to safeguard that data. Given the frequency of cyberattacks today, it is simply unreasonable for companies to lack a comprehensive risk-based data security program."