US EditionSpain Reminds Hotels that It's Illegal to Make a Copy of Guests' IDs
- On 18 June 2025, the Spanish data protection authority clarified that hotels and holiday accommodations in Spain are not permitted to make copies of guests' ID cards or passports, as this practice breaches data protection regulations.
- This statement follows the Spanish government’s December 2024 announcement requiring hotels and agencies to collect more personal data while AEPD warns that copying documents entails excessive processing and risks identity theft.
- The AEPD stressed that establishments must collect only specified data like name, ID number, date of birth, and address, and verify identity by visual checks and payment method authentication without retaining copies.
- AEPD highlighted that simply sending copies does not ensure accurate identity verification and suggested that confirming the information by cross-referencing the payment method employed can serve as an additional validation step.
- As a result, hotels must stop photocopying IDs to avoid privacy risks and adhere to data minimization requirements, promoting guest data security without unnecessary document retention.
12 Articles
12 Articles
The privacy regulator warns that this practice is "excessive" and that it is not valid to comply with the Interior regulations on the registration of travelersInterior defends that the new register of travelers has allowed to locate 18,584 people who were in search and capture Verify the data, yes; keep a copy, no. The Spanish Agency of Data Protection (AEPD) has issued this Tuesday an information note aimed at hotels and tourist accommodation i…
The Business Federation of Territorial Associations of Spanish Travel Agencies (Fetave) reiterates its firm opposition to Royal Decree 933/2021, as it imposes disproportionate and inescapable obligations on travel agencies it considers could be contrary to Community legislation on the protection of digital data and services and, in this opposition, three important actions have been taken to reinforce Fetave’s position in its opposition to RD 933…
The Spanish Agency for Data Protection (AEPD) has made it clear that hotels, hostels and the rest of the lodgings cannot request a copy of the ID card or passport from their customers, and that they may refuse to comply with this requirement. The AEPD has developed an argument that the identification of the people who are going to book or hire a lodging will not be violated their privacy rights. The hotels, however, denounce the legal insecurity…
MADRID, 18 (EUROPA PRESS) The Business Federation of Territorial Associations of Spanish Travel Agencies (Fetave) has asked in Brussels for further clarification on the current state of its complaint against Royal Decree 933/2021 or new passenger registration, presented in January 2023. Specifically, the European Ombudsman has admitted to [...] The entry Fetave asks in Brussels for further clarification on the current state of its complaint agai…
Coverage Details
Bias Distribution
- 67% of the sources lean Left
To view factuality data please Upgrade to Premium
