Alloggiati Web in 2026: reporting guests to the police for hotels, B&Bs and short-term rentals in Italy

Updated 8 November 2026

Anyone who provides paid accommodation in Italy, from a hotel in Florence to a short-term rental apartment in Positano, must report their guests' personal details to the police headquarters (Questura). This is required by article 109 of the Consolidated Law on Public Security (TULPS, Royal Decree 773/1931), and the report is filed on the State Police's Alloggiati Web portal. This guide sums up what we could read, as of November 2026, in the Interior Minister's decree of 7 January 2013, the portal's guide, the Interior Ministry's circular of November 2024 and the rulings that followed, with the sources at the end. Where a detail does not appear in an official source, we say so. It is not legal advice: for a specific case, ask the Questura of your province or a professional.

Who must report

According to the Chamber of Deputies' dossier on Decree-Law 53/2019 and the Interior Ministry's circular of November 2024, the obligation covers:

Operators of hotels and other accommodation, including holiday homes and apartments, affittacamere and non-conventional accommodation; the dossier notes that mountain huts listed in the regional or provincial register are excluded.
Landlords and sub-landlords renting a property on contracts shorter than 30 days: this is stated by article 19-bis of Decree-Law 113/2018 (converted by Law 132/2018), an authentic interpretation of article 109. So non-business short-term hosts are included too.
According to the same circular, also people hosting through home exchanges and operators of «marina resorts» (accommodation on leisure boats).
The rule applies to everyone: a hotel is not exempt because it has a front desk, and an apartment is not exempt because it is the only one.

Deadlines

There are two:

Within 24 hours of the guests' arrival, as the general rule (decree of 7 January 2013 and the portal's guide).
Within 6 hours of arrival for stays of no more than 24 hours. This deadline was introduced by article 5 of Decree-Law 53/2019; the Chamber's dossier explains it would take effect only after an implementing decree by the Interior Minister. The November 2024 circular cites the 2013 decree «as amended» by the decree of 16 September 2021 and gives 6 hours as the deadline in force, as does the portal's guide. We could not read the text of the 2021 decree.
The portal only accepts guest records with today's or yesterday's arrival date: beyond that, you can no longer enter them the normal way (Alloggiati Web guide).
If the portal is down, the 2013 decree requires you to notify the Questura at once by any means and send the guest list by certified email (PEC) or fax, keeping the sending receipts.

What data is reported

According to the annex to the 2013 decree and the portal's guide:

For a single guest, head of family or group leader: arrival date, length of stay (maximum 30 days per record), surname and first name, sex, date and place of birth, citizenship, type and number of the ID document and place of issue.
For family members and group members, personal details are enough: no ID document is required, and their record goes right after the head of family's or group leader's, with the same arrival date.
Records can be entered one at a time on the website or uploaded as a text file generated by your property management system; for hosts with several apartments there is a single-file format with a code for each apartment.
The portal also offers a web service (WSKEY key) so data can be sent straight from your property management system or channel manager.

How to register

Registration always goes through the Questura of the province where the property is located (Florence, Siena, Pisa, Salerno and so on):

The 2013 decree provides that the operator applies to the competent Questura, which enables them and issues login credentials for alloggiatiweb.poliziadistato.it.
According to the portal's current guide, you log in with a username, a password and codes from a code card; to recover credentials you need at least two of the password, the code card and the PUK.
Each Questura publishes its own application form and states which documents to attach and how to send them. We could not open the Questure's pages, so we give no documents, timescales or costs: check them on your Questura's website before your first guest arrives.
You need the credentials before the first arrival: without them, you cannot meet the 24-hour deadline.

Receipts and record keeping

After each submission the portal issues a receipt:

It is a digitally signed PDF showing how many records were sent that day, and it is proof that you complied (2013 decree).
The portal's guide says receipts can only be downloaded for the last 30 days: download and save them regularly.
The 2013 decree requires receipts to be kept for five years and, once obtained, the data sent to be deleted and any paper copies sent by fax or PEC to be destroyed.

In-person identification and self check-in

This has been the most debated issue of the last two years:

November 2024: a circular from the Public Security Department (no. 557/ST/221.3.1.0) states that remote check-in, with documents sent online and entry by code or key box, does not satisfy article 109: the guest's identity must be checked in person (de visu).
2025: the Lazio Regional Administrative Court (TAR, ruling 10210/2025, First Section) annuls the circular. We could not open the TAR ruling's text on an official source.
21 November 2025: the Council of State (Third Section, ruling 9101/2025) upholds the Ministry's appeal, overturns the TAR ruling and reinstates the circular. The check «can only be carried out de visu», but the ruling does not rule out video links that confirm in real time that the guest is the person on the document.
In practice, as of November 2026: sending a photo of the ID and leaving the keys in a box is not enough. You need in-person recognition or a system that compares the guest's face with the document live. We found no official technical guidance on which systems are accepted: ask your Questura before adopting one.

Penalties

Article 109 sets no penalty of its own. According to the November 2024 circular and the Council of State, breaches fall under article 17 of the TULPS, which makes them a criminal offence:

The Constitutional Court's order 262/2005 quotes the penalty under article 17: arrest of up to three months or a fine (ammenda) of up to 206 euros, as alternatives.
We could not read the current text of article 17 on Normattiva to confirm the amount has not changed.
Because it is a criminal offence, the consequence is not only financial: one more reason not to skip a single record, even for a one-night stay.

What Alloggiati Web is not

Some obligations are often confused with reporting to the Questura, but they are separate and must be done on their own:

Statistical reporting of guest movements (arrivals and overnight stays for ISTAT), which goes through the systems set by the Region or Province. See our guide on ISTAT tourism statistics (Turismo5 in Florence, Sinfonia Turismo SMART in Campania).
The tourist tax (imposta di soggiorno), which is declared to the municipality on its own portal.
The CIN, the National Identification Code, obtained from the Ministry of Tourism's database.
Sending records to Alloggiati Web does not fulfil any of these obligations, and vice versa.

What to do in practice

A simple routine avoids nearly every problem:

Request credentials from the Questura before you open, one per property if your Questura's form requires it.
Identify every guest in person (or with a real-time recognition system) and check the ID at check-in.
Send the records on the day of arrival: that way you meet both the 24-hour and the 6-hour short-stay deadlines.
If your property management system or channel manager sends the data automatically, check the outcome every day: the responsibility remains yours.
Download receipts at least once a month and keep them for five years.
Tell guests, on your website and in the confirmation, that every person will need a valid ID at check-in and how identification will take place.

Why this also matters for AI

When a traveller asks ChatGPT or Gemini how check-in works at a property, the assistant pulls together what it finds on your website and on the platforms. If everywhere says clearly and consistently that an ID is required and how identification works, the answer matches what the guest will find on arrival. If a listing promises a «contactless self check-in» that is no longer compliant, the AI may repeat it, and the surprise at check-in lands on the property.

How iQuota helps

The official page iQuota publishes for each property can state check-in times and procedure and the documents required, and includes that information in the data AI assistants and search engines read. iQuota does not send records to Alloggiati Web on your behalf, does not replace your obligations to the Questura, and cannot guarantee that an AI will recommend your property.

Want an official page that clearly explains check-in, the documents required and direct booking? The first 30 hotels join free until 30 June 2027.

See the Founding Hotels programme

Frequently asked questions

Does someone renting a single apartment without a business have to use Alloggiati Web?

Yes. Article 19-bis of Decree-Law 113/2018 extends the article 109 obligations to landlords and sub-landlords on contracts shorter than 30 days, whether or not they rent as a business.

When must I send the record?

Within 24 hours of arrival. If the stay is no longer than 24 hours, within 6 hours of arrival, as stated by the Interior Ministry's November 2024 circular and the portal's guide.

Is self check-in with a key box still allowed?

Not as the only method. After Council of State ruling 9101/2025 the guest's identity must be checked de visu; the ruling does not rule out a video link that confirms in real time that the guest is the document holder.

Do children need to be registered too?

Yes, every guest has their own record. For family members and group members, however, the 2013 decree does not require ID document details.

What happens if I fail to report a guest?

According to the 2024 circular and the Council of State, article 17 of the TULPS applies, a criminal penalty: the Constitutional Court's order 262/2005 gives it as arrest of up to three months or a fine of up to 206 euros. We could not confirm the amount on the current text.

How long must I keep the receipts?

Five years, under the decree of 7 January 2013. The portal only lets you download them for the last 30 days, so save them in time.

Sources

More guides for hotels

More guides for hotels →

Italiano