I was just speaking with a colleague about the news that Google has been fined the largest penalty to date for failing to comply with GDPR obligations. The penalty was around $56 million USD, but the Marriott data breach penalty is estimated to be around $1 billion. Why such a discrepancy between the two? That