Data protection for hotels: protect guest data under the Privacy Act

What the Privacy Act means for hotels

The revised Australian Data Protection Act has applied since 1 September 2023. Hotels process a lot of personal data: names, contact details, travel documents, payment information and preferences. Guests have rights, such as access to stored data or its deletion, unless a legal retention duty applies.

Hotels must inform transparently, protect data appropriately and know where it is stored. A suitable system makes this much easier.

How the system supports you

Guest data is bundled in one profile, so you can answer access requests quickly and delete or anonymise data on request. Roles and access rights limit who sees which data, and the change log shows who changed what and when.

We discuss with you where data is stored and which service providers are involved, so you can word your privacy notice accordingly. Responsibility for complying with the law remains with you as the operator.