The ICO is also responsible for the second highest fine. The notice of its intention to impose a fine of EUR 110.4 million was issued on 9 July, 2019 against the hotel group Marriott International (please find the press release here ). Due to inadequate technical and organizational measures, more than 339 million guest records worldwide were unintentionally disclosed in the period of 2014 through 2018. The ICO believes that the vulnerability began when the systems of the Starwood hotels group were compromised in 2014. Marriott subsequently acquired Starwood in 2016, but the exposure of customer data was not discovered until 2018. The ICO's investigation led to the conclusion that Marriot failed to undertake sufficient due diligence when it bought Starwood and should have also done more to secure its IT systems. In 2018, Marriott International had a worldwide annual turnover over of GPB 20.75 billion which resulted in a fine to the annual turnover ratio of roughly 0.5 %.