An example of an information breach due to lack of proper due diligence is the acquisition of Starwood Hotels by Marriot Group. Marriot's due diligence provider did not carry out proper due diligence, which lead to information breaches of 400 million customers of Starwood Hotels. This breach included tourists from the European Union as well as the UK. The Information Commissioners Office (ICO), the United Kingdom's data privacy authority, had imposed a heavy fine on the Marriot group.