The law could become one of the strictest in the country, one attorney said, because it prescribes specific security rules.

U.S. advertisers spent an estimated $23.5 billion on the tactic last year, up from $6.4 billion in 2014.

Bounty UK collected information from new mothers, mothers-to-be, as well as the birth dates and genders of young children, according to the ICO.

Jon Callas, a computer security expert who left Apple for the ACLU last year, said Monday it’s become too easy to become nihilistic about personal privacy because of the last decade of negative headlines about corporate data collection.

While it’s not new for CISOs to compare notes with their counterparts in other companies, the number of invite-only sessions is growing as the pressure on executives grows to get things right.

The company has determined that hackers had unauthorized access on Starwood’s guest database dating back to 2014.