Problem Statement
Under GDPR, what led to heavy fines against companies like British Airways and Marriott?
Explanation
British Airways and Marriott faced large fines because regulators found their security measures insufficient under GDPR’s data protection requirements. The rulings demonstrated how compliance obligations go beyond documentation — companies must show practical, effective safeguards for user data.
