On 2 December, Spanish authorities updated data gathering legislation to tackle organised crime and terrorism, prompting privacy concerns among British tourists.

Under the new data laws, hotels and car rental companies must gather customer data – including document number, telephone and email address as well as payment method identification – and upload it to the Spanish interior ministry’s online platform. 

However, the Spanish Tourist Office pointed out that agents and tour operators selling holidays to Spain are not required to share their customers’ data.

A second ministerial order, which is currently undergoing public consultation, will decide whether additional information must be uploaded by hotels and car rental firms too. 

Booking platforms – such as Airbnb, Expedia and Booking.com – will also be obligated to share the data.

According to Spanish Tourist Office, the collection of tourist data is not a new practice as it has been done in Spain since the late 1950s and it is regulated by the EU’s general data protection regulation.

“The new method simplifies and streamlines this process, leveraging the capabilities of modern electronic communication systems and ultimately enhancing the efficiency of the state security forces in their preventative and protective duties,” said the Spanish Tourist Office.