New Spanish Law on Traveler Data Raises Privacy Concerns
A new law set to take effect on October 1, 2024, in Spain has raised significant concerns among hoteliers, travel agencies, and private rental landlords. The legislation, established by Royal Decree 933/2021, mandates that these entities collect and share sensitive information about travelers with the Ministry of the Interior. This includes details such as payment methods, financial transactions, credit card numbers, contract specifics, and personal contact information, affecting both domestic and international tourists.
The Spanish Confederation of Hotels and Tourist Accommodation (CEHAT), which represents over 16,000 businesses and 1.8 million accommodation options, has voiced strong opposition to the law. Concerns center around issues of data collection, storage, and privacy. CEHAT argues that the law is impractical and could lead to increased errors, manual processing, and higher operational costs for businesses in the hospitality sector.
While the Ministry of the Interior asserts that the law is essential for enhancing public safety and combating terrorism and organized crime, many in the tourism industry believe it is an excessive measure that could disadvantage Spanish companies compared to their EU counterparts. The tourism sector, already grappling with challenges such as anti-tourism protests in popular areas, fears the law could further harm its economic contributions.
Travel agencies have requested that the Ministry of the Interior either exclude them from the law’s requirements or set clear limits on its application. With the implementation date approaching, there is growing anxiety within the industry regarding the confusion over data requirements and submission processes, as well as concerns about potential infringements on the privacy rights of travelers.
Source: New Spanish tourist law sparks concerns over data protection and privacy
Rocky
September 25, 2024 @ 18:31
GDPRbuzz as useless as always! Just blablabla about this new, very important law and absolutely nothing about actual relation to GDPR. useless!
Atis
September 26, 2024 @ 12:08
Rocky, here is some more information on Royal decree: https://www.checkinscan.com/en/royal-decree-933-2021/, and here – on possible conflict with data protection laws: https://www.ectaa.org/Uploads/press-releases/DP-LED-Analysis-of-Spanish-Royal-Decree-933-2021.pdf.
Just search “Royal Decree 933/2021” and you will get more information, including analysis etc.