<ul><li>The Federal Trade Commission (FTC) has finalized an order requiring Marriott International and its subsidiary Starwood Hotels & Resorts Worldwide to implement a comprehensive information security program.</li><li>The final order settles the FTC’s charges announced in October that the companies deceived customers by claiming to have reasonable data security, when in fact they did not.</li><li>The companies suffered three data breaches that affected more than 344 million of their customers worldwide, according to the FTC.</li><li>Under the order, Marriott and Starwood are required to establish a comprehensive information security program, retain personal information only as long as necessary, and restore stolen loyalty points upon request.</li></ul>

FTC Finalizes Order Requiring Marriott to Improve Data Security

Discover more