European tourism industry welcomes Commission action after years of raising concerns over Spain’s traveller data collection regime

Brussels, 08/06/2026 – A coalition of European tourism and travel associations, composed of ECTAA, EFCO&HPA, ETOA, HOTREC and RuralTour welcomes the European Commission’s decision to open an infringement procedure against Spain concerning Royal Decree 933/2021* and its compatibility with the EU Law Enforcement Directive.

The Commission announced on Thursday 4 June that it had sent a Letter of Formal Notice to Spain, expressing concerns that the country’s traveller data collection requirements may breach EU data protection rules. The Commission specifically questions the excessive categories of personal data collected, including payment and location-related information, the broad access granted to law enforcement authorities, and the three-year retention period.

The Commission’s action follows several years of sustained engagement by the European tourism sector, which repeatedly raised concerns with both Spanish and European authorities regarding the proportionality, legality and practical implementation of Royal Decree 933/2021.

Since 2024, the coalition organisations have sent multiple joint letters to the Spanish Ministries of Interior and Tourism, the Spanish Data Protection Agency, the European Commission and other relevant authorities. The sector also submitted detailed legal analyses and participated in public consultations, consistently highlighting potential incompatibilities with EU data protection legislation and the significant burdens imposed on tourism businesses.

The coalition welcomes the Commission’s decision to examine the compatibility of the Spanish requirements with EU law. The opening of the infringement procedure reflects concerns that have been consistently raised by stakeholders across the tourism ecosystem.

Throughout its exchanges with authorities, the tourism sector repeatedly warned that the Decree required the collection of excessive amounts of personal and transaction data, created legal uncertainty regarding compliance with EU data protection rules, and imposed disproportionate administrative burdens on travel businesses, accommodation providers and other tourism operators across Europe.

The coalition fully recognises the importance of measures aimed at combating terrorism and organised crime. However, it has consistently maintained that such measures must respect the principles of necessity, proportionality and legal certainty that underpin EU legislation and fundamental rights protections.

The organisations hope that the infringement procedure will lead to a framework that effectively supports security objectives while ensuring compliance with EU law and avoiding unnecessary burdens for travellers and tourism businesses

The coalition remains committed to engaging constructively with the European Commission, the Spanish authorities and other stakeholders to achieve a practical, proportionate and legally sound solution.

For more information on ETOA and its initiatives, visit www.etoa.org.

Contact: policy@etoa.org

 

– Ends –

About the Coalition:

European Tourism Association – ETOA is the trade association for tour operators and suppliers in European destinations, from global brands to local independent businesses. The membership includes tour and online operators, intermediaries and wholesalers, European tourist boards, hotels, attractions, technology companies and other tourism and business service providers. For media inquiries, please contact: policy@etoa.org

ECTAA represents the interests of 80,000 travel agents and tour operators in Europe, which provide consultancy and sell transport, accommodation, leisure and other tourism services as well as combined products to leisure and business customers. For media inquiries, please contact: Benoît Chantoin bchantoin@ectaa.eu

EFCO&HPA is the representative body at European level, working for all businesses with caravans, tents, motorhomes, chalets and all forms of self-catering accommodation in the park setting. Membership is made up of the national trade associations of 23 European countries. For media inquiries, please contact: Helen Charlesworth h.charlesworth@bhhpa.org.uk

HOTREC is the voice of the European hospitality sector, representing hotels, restaurants, cafés and bars across Europe. Through 47 national member associations in 36 countries, HOTREC supports a sector comprising more than 2 million businesses, the vast majority of which are SMEs, with around 9 in 10 hospitality establishments being micro-enterprises. Hospitality is an integral part of Europe’s tourism ecosystem, which together accounts for around 10% of EU GDP, supporting jobs, local economies and Europe’s attractiveness as a global destination. For media inquiries, please contact: Marta Machado, Deputy Director General, marta.machado@hotrec.eu

RuralTour, the European Federation of Rural Tourism, represents an estimated 500.000 rural micro and nano enterprises and about 5-6.5 million bed places through 28 professional and trade organisations from 25 countries of geographic Europe. For media inquiries, please contact: Klaus Ehrlich general.secretary@ruraltour.eu

*About the Decree:

The Royal Decree 933/202 requesting operators, hotels and rental companies to collect customers’ data (name, age, email address, etc.) when entering Spain, came into effect in December 2024.

As per our understanding, according to the Royal Decree, obligated parties must transmit the data through the electronic procedure provided by the Ministry of the Interior at the following link. They also have to register in advance into Cl@ve, a digital ID system for securely accessing online government services.  More information can be found here.

In the case of a property that is advertised and rented through an intermediary (such as a web platform), each party is required to transmit the information they possess and are obligated to report under the Royal Decree; however, when multiple intermediary entities are involved in the commercial relationship, the responsibility to report the data lies with the entity that has a direct and final contractual relationship with the customer.

The information below for each guest must be communicated within 24 hours of the following events:

• When the reservation is made, the contract is formalized, or, if applicable, cancelled.
• At the start of the contracted services.

1. First name
2. First surname
3. Second surname (if applies)
4. Gender
5. ID document number
6. Document reference number
7. Type of document (DNI, passport, TIE)
8. Nationality
9. Date of birth
10. Full address (Place of usual residence : city and country)
11. Landline phone number
12. Mobile phone number
13. Email address
14. Number of travelers
15. Relationship between travelers (if any of them is a minor)