Interior Retreats from Traveler Registry Amid Hotel Sector Pressure

Interior Retreats from Traveler Registry

The Spanish Ministry of Interior has reversed its controversial traveler registry rule trinc strong opposition from the tourism industry, sparking debate on privacy and enforcement. The retreat brings relief to hoteliers but leaves travelers questioning the extent of data collection and whether this is a permanent change or a temporary pause.

The Royal Decree 933/2021, issued on October 26 (BOE-A-2021-17461), mandates documentation and information requirements for accommodation and vehicle rental providers. It has been approved for three years but only recently enforced. With this precedent, many assume the retreat has an expiration date.

What Data Did the Traveler Registry Request from Hotels?

For establishments, the system requests the tax ID (CIF/NIF), name, municipality, and province. For travelers, the list is longer: ID number, type, issue date, first and last names, gender, date of birth, nationality, and entry date. Additionally, according to the circulating plan, phone number, email, and bank details were required. This is where the issue became a powder keg.

Requesting bank details is different from asking for an ID. Bank information should only reach a third party with a judicial order. When the recipient is a hotel receptionist, the chain of custody becomes flimsy. The sector itself admits it already reported stays to the Ministry; the jump was to expand the package.

The Hotel Rebellion and Interior's Retreat

The pressure from the tourism sector was the trigger. The Ministry announced it would no longer demand the new traveler registry data. The news spread through usual channels, sparking two almost simultaneous reactions: relief among those operating with international reservations and distrust among those who have heard promises of administrative simplification for years.

Some argue it is a distraction tactic: in a couple of months, no one will talk about the issue, and the requirement will return through the back door. Conversely, the counterargument is simple. If the sector has stood firm collectively, reopening the regulation carries a political cost no one wants to pay.

«It Is Not Mandatory to Have Email, Phone, or Bank Account»

The most repeated argument is elementary logic: in Spain, it is not mandatory to have an email address, mobile phone, or bank account. How can it be mandatory to provide data on something that is not mandatory to possess? This question has been raised by 75-year-old retirees, people without cards, and anyone who has tried to fill out the form with trembling hands.

The proposed workarounds are standard. Paying in cash, which remains a legal payment method and mandatory to accept. Inventing an email: those who do so wryly recall that the police request it when renewing the ID, and any fictitious address fits. Changing the last digit of the phone number when claimed by a long-distance service. And if the form is paper, write whatever: the receptionist processes, not investigates.

«Logger». Lou Reed claimed he answered this when asked for his profession on absurd forms. The reference has returned to the debate as a small salon rebellion: if the data serves no purpose, the answer need not be true. It is adorned by a detail that is not minor: increasingly, hotels request a credit card even if you pay in cash.

The Unaudited Risk: Hotel Databases

And here comes the uncomfortable point. An ID scanned at reception, a photo taken with the manager's personal phone, a form stored in an unencrypted digital drawer. With name, surname, phone, email, and stay dates, a fairly intimate profile is built. Among other things, it allows knowing if a house is empty in a specific week.

No ministry matters here. The risk is not the official gazette, but the reception USB. Birthday greetings have even been sent to the client's home by an establishment that kept the file well. Imagination is not lacking; protection, sometimes yes.

Gender, «Others», and Impossible Verification

The gender field adds another layer of surrealism: three options —woman, man, or others. Who checks the accuracy of the data? The receptionist, under what protocol? The question answers itself. Nobody, judging by what is discussed. It is foreseeable that many establishments will fill out a form, scan the document, and upload the package to the platform without reading it.

International parallels have been made without shame. Some place Spain at a higher control level than South Korea or the United States, while others recall the ELbichito passport as a precedent: a requirement that, according to the debate, lacked clear legal coverage and was applied daily in bars and restaurants, to the point that those who refused were the rare ones.

The provisional closure invites lukewarm optimism. If sector pressure holds and the system remains a basic data registry, most travelers will notice little at reception. If the Ministry recovers the full package within a few months, the field is prepared: invented emails, phones with one digit changed, cash, and a distrust that can no longer be dismantled with a press release.