So far, the road to finalize GDPR violation fines against Marriott and British Airways has taken over a year, but lawyers say the ICO is taking its time to build a precedent that withstands corporate battles.