I conducted an independent public-facing review of privacy for 50 California hotels. What I discovered is that hotel privacy readiness is uneven and that having a privacy policy and having a clear process for handling privacy are two different things. Most hotels look good on the surface. They have
For years, privacy compliance was often treated as a disclosure exercise. Publish a privacy policy. Add the required links. Update the booking page. Make sure the legal language is there. Those things still matter. But privacy regulation is moving toward a much more demanding question: Can you prove that your
Someone just used AI to break into four hotel booking platforms. Here's why the breach isn't the scary part — and what GMs need to do this week.
Small to medium hotel portfolios run on vendors. Your PMS, booking engine, payment processor, channel manager, loyalty tools, Wi-Fi provider, marketing platform, payroll system, HR software, CCTV vendor, spa software, restaurant POS, guest messaging tool, and reputation platform all help the business operate. But together, they also create one
California hotel operators usually think first about CCPA and CPRA. That makes sense. But for many hotel portfolios, GDPR is not just a European issue. A California hotel can fall within GDPR in certain situations, even if the business is based in the United States. For portfolio operators, management companies,
It starts with an email. Or a phone call to the front desk. Or a form submission on your website. A guest — maybe someone who stayed three months ago, maybe someone who booked through an OTA and never actually checked in — asks your hotel for all the personal data you&
Summary: Hotels in franchise systems, joint ventures, or running retargeting ads are often CPRA-covered—even outside California. This post explains why, then shows a fast, defensible path to compliance using HotelComply. Why this matters now * The CPRA’s global revenue test updates for inflation and applies to worldwide revenue.