The UK’s data privacy regulator has said it plans to fine the US hotel group for a data breach.