Who Owns JW Marriott?

JW Marriott operates under Marriott International's Serve360 sustainability platform. Marriott has committed to achieving net-zero greenhouse gas emissions by 2050, with interim targets including a 30% reduction by 2030. The company has set goals to reduce water consumption, waste, and carbon emissions across its managed properties.

JW Marriott properties implement energy-efficient lighting, water conservation systems, and waste reduction programs as part of Marriott's sustainability standards. The brand does not hold independent sustainability certifications such as LEED or B Corp at the brand level, though individual properties may pursue local green building certifications.

Marriott has committed to eliminating single-use toiletry bottles from its properties, replacing them with larger pump dispensers. This initiative applies to JW Marriott properties and is expected to reduce plastic waste by approximately 500 million bottles annually across the Marriott system.

Marriott does not hold B Corp certification. The company publishes an annual Sustainability Report detailing progress against its environmental and social goals. The report is verified by third-party auditors for greenhouse gas emissions data but not for all sustainability claims.

The most significant controversy affecting JW Marriott is the Marriott International data breach, which exposed the personal information of over 344 million guests. The breach originated in the Starwood guest reservation database, which Marriott acquired in its 2016 purchase of Starwood Hotels & Resorts.

The breach began in 2014, before Marriott acquired Starwood, but went undetected until September 2018. Malicious actors accessed approximately 339 million Starwood guest records, including 5.25 million unencrypted passport numbers. Marriott disclosed the breach in November 2018. The UK Information Commissioner's Office fined Marriott approximately $23.8 million in 2020 under GDPR regulations.

In October 2024, the U.S. Federal Trade Commission took action against Marriott and Starwood over the data breaches. The FTC settlement required Marriott to implement a comprehensive information security program, provide data deletion options for customers, review loyalty rewards accounts for unauthorized activity, and restore stolen loyalty points. Marriott must maintain the security program for 20 years with annual FTC certification and undergo independent third-party security assessments every two years.

In 2024, Marriott agreed to pay a $52 million penalty to 49 states and the District of Columbia to resolve data security allegations related to the breaches. In June 2025, Marriott won an appeal in the 4th Circuit Court of Appeals to block a class action lawsuit over the breaches, though the regulatory penalties and required security improvements remain in effect.

A separate data breach occurred in February 2020, affecting 5.2 million guest records. This breach involved Marriott's own network rather than the legacy Starwood system. Marriott addressed the vulnerability and notified affected customers.