Newsletter Archives

• Marriott data breach is enormous

  Posted on December 3, 2018 at 07:50 CST by woody • Comment in the Forums

  Catalin Cimpanu, now on ZDNet, has the news that

  Hours after announcing a data breach on Friday, two Oregon men sued international hotel chain Marriott for exposing their data. Their lawsuit was followed hours later by another one filed in the state of Maryland.

  Both lawsuits are seeking class-action status. While plaintiffs in the Maryland lawsuit didn’t specify the amount of damages they were seeking from Marriott, the plaintiffs in the Oregon lawsuit want $12.5 billion in costs and losses.

  That’s a paltry $25 for each record that’s been purloined. 500 million hotel guests, starting in 2014. “name, mailing address, phone number, email address, passport number, Starwood Preferred Guest (“SPG”) account information, date of birth, gender, arrival and departure information, reservation date, and communication preferences.”

  Quite a haul.

  Check your credit cards, folks. And push for a US-based GDPR.

  UPDATE: If you haven’t seen Brian Krebs’s take on the big breach, look here and here.

  I got quite a chuckle when I checked my old messages and came across this one from May:

  

  As we continue to integrate Starwood Hotels with Marriott®, we wanted to let you know that we have updated our Global Privacy policy. What’s Changed?

  • Our updated Global Privacy Statement now reflects the combination of Marriott International, Inc. and StarwoodHotels & Resorts Worldwide, LLC (formerly known as Starwood Hotels & Resorts Worldwide, Inc.) and their affiliates. • Our updated Global Privacy Statement makes it easier to understand the types of data we collect, how we collect data, with whom we share and how we use it (e.g., to offer personalized stay and travel experiences based on your personal preferences). • Our new Privacy Center provides helpful information about how you can express your preferences, from what and how much you share with us, to when and how you hear from us.

  We’re making these updates as new data protection regulations come into effect in the European Union, and we are confident they will make it easier to understand the choices available to you.

  Other GDPR, Mariott, Starwood

• New version of the EU General Data Protection Regulation

  Posted on November 5, 2017 at 09:10 CST by woody • Comment in the Forums

  From HiFlyer:

  “This website is a resource to educate the public about the main elements of the General Data Protection Regulation (GDPR)
  “After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. It will enter in force 20 days after its publication in the EU Official Journal and will be directly application in all members states two years after this date. Enforcement date: 25 May 2018 – at which time those organizations in non-compliance will face heavy fines.”

  http://www.eugdpr.org/

  Key Changes

  http://www.eugdpr.org/key-changes.html

   

  Other GDPR