Guest registration in Spain with SES.HOSPEDAJES in 2026: data, deadlines and fines

Updated 10 November 2026

Every hotel, hostal, tourist apartment or holiday rental in Spain must identify its guests and send their details to the Interior Ministry. Since 2 December 2024 this follows Royal Decree 933/2021 and the SES.HOSPEDAJES application. This guide sums up what the rules say in November 2026, with the Costa de la Luz and Seville in mind, and the official sources at the end. It is not legal advice: for a specific case, ask your accountant or the local Policía Nacional or Guardia Civil.

Which rule applies and since when

Royal Decree 933/2021 of 26 October (published 27 October 2021) sets the record-keeping and reporting duties for accommodation and vehicle rental. It implements article 25 of Organic Law 4/2015 on public safety. According to the Interior Ministry, the decree has been in force since April 2022, but its reporting duties were postponed several times. The new register went live on 2 December 2024. The BOE consolidated text shows no amendment to the decree to date.

Order INT/1922/2003, amended in 2021 by Order INT/321/2021, remains in force where it does not contradict the decree, until implementing rules are issued. It covers the register book and the guest entry form, and already required reporting within 24 hours and keeping records for 3 years.
In December 2024 the Ministry put a draft ministerial order implementing the decree out for public consultation. We found no sign in the BOE that it had been approved as of November 2026.

Who must comply

The decree applies throughout Spain to any person or company offering accommodation, professionally or not, and to anyone who intermediates it:

Hotels, hostales, guesthouses and rural tourism properties.
Campsites, motorhome areas, tourist apartments and bungalows, and holiday rentals (VUT).
Travel agencies and tour operators that intermediate, and digital booking platforms, free or paid, offering services in Spain.
According to the Ministry, by December 2024 more than 61,500 establishments, 1,100 travel agencies and 222 digital platforms had signed up.
Before starting to rent, the establishment must report its own details (holder, tax ID, contact, website, address…), and report again if they change. The decree allows 10 days from the administrative procedures and, in any case, before opening.

What data is required for each guest

Annex I of the decree lists the data. The establishment is responsible for its accuracy and for checking it matches the ID document shown.

Guest: full name, sex, type and number of document (Spanish ID, passport or residence card) and support number, nationality, date of birth, usual address, phone or email, number of guests and relationship when minors are travelling.
Contract: reference number, date and signature; check-in and check-out dates and times; address, number of rooms and whether there is internet.
Payment: type and method of payment (identification, holder, expiry) and date. The Ministry explains that if payment is by card, bank transfer or payment platform, the transaction must be identified.
Guests over 14 must sign the form. Details of children under 14 are given by the accompanying adult. The Junta de Andalucía also refers to identifying guests over 14.
The Ministry says only the data companies already collect for their business needs to be sent, and the Tourism Ministry speaks of 13 data items per guest against 11 before. The official list of mandatory and optional fields was due in the ministerial order, which we have not found published.

Deadlines and retention

The decree separates what is sent from what is kept:

Data is reported when a booking or contract is made, when it is cancelled and when the stay starts: immediately and within 24 hours at most.
Reporting is online. Private non-professional hosts may use other means under a procedure still to be set; we found no such procedure published.
Data is kept in an electronic register for 3 years from the end of the stay. Private non-professional hosts do not have to keep that register, but they must still report.
The data goes to two files of the Secretariat of State for Security and may only be used by the police and security forces, judges and prosecutors.

How to send it: SES.HOSPEDAJES

SES.HOSPEDAJES (hospedajes.ses.mir.es) is the Secretariat of State for Security's application that replaces paper register books. According to the Ministry, external software can connect to it to send data automatically and in bulk, so many hotel management and online check-in tools can send it for you. We could not consult the Ministry's e-office FAQ for this review, so check the application itself for sign-up and technical formats.

Fines

Article 8 of the decree refers to the penalties in Organic Law 4/2015. Liability falls directly on the party that commits the offence.

Serious (art. 36.20): not keeping the records or not making the required reports. Fine of 601 to 30,000 euros (lower band 601 to 10,400; middle 10,401 to 20,200; upper 20,201 to 30,000).
Minor (art. 37.9): errors in filling in the records or reporting late. Fine of 100 to 600 euros.
We found no official figures on fines imposed since December 2024.

Brussels and the courts in 2026

On 4 June 2026 the European Commission opened an infringement procedure against Spain (INFR(2026)4005) over this rule. It considers that too many categories of data are collected, that police access is not limited to specific purposes and that 3-year retention is disproportionate, under Directive (EU) 2016/680. Spain had two months to reply. A letter of formal notice does not suspend the rule: until it is changed, it remains mandatory. We found no official Spanish reply, no reasoned opinion and no published court ruling annulling or suspending the decree as of November 2026.

Andalusia and regional registers

We found no separate guest register in Andalusia. The Junta's FAQ says holiday rentals must keep the register book and send the entry form to the Policía or Guardia Civil, and points to SES.HOSPEDAJES. On the Costa de la Luz and in Seville, then, the national application is used. Other regions differ:

Catalonia: establishments send the data to the Mossos d'Esquadra online, within 24 hours of the start of the stay, under Order IRP/418/2010.
Basque Country: there is an Ertzaintza channel, but we could not consult its official page to confirm how it works alongside SES.HOSPEDAJES.
Do not confuse guest registration with other registers: the Andalusian Tourism Register (VUT code), covered in our Andalusia holiday-rental guide, and Spain's Single Rental Register (Royal Decree 1312/2024), whose registration procedure and number the Supreme Court annulled in May and June 2026. Guest registration is filed separately.

In practice: collecting data without losing the booking

Asking for 20 fields on the booking form scares guests away. The law requires the data to be reported, not all collected at the same moment:

At booking, ask only what the booking needs: name, phone or email, dates and number of guests, including children. Keep the payment type and the transaction reference, never the full card number in an email.
Three to seven days before arrival, send a secure online check-in link so each adult can fill in their details and sign.
Do not ask for photos of ID cards or passports by WhatsApp or email: use a tool that encrypts the data and sends it to SES.HOSPEDAJES.
Explain why in one sentence: it is a legal requirement of the Interior Ministry, the same all over Spain.
If the guest does not fill it in beforehand, collect the data on arrival and check it matches the document shown.
If the booking comes through Booking, Airbnb or an agency, the platform is also bound, but the property is still responsible for the details of whoever stays. Check how each platform handles it.

A pre-arrival message

An example you can adapt:

«Hi Ana, we look forward to seeing you in Vejer on Friday. Spanish law requires us to register every guest over 14 with the Interior Ministry. You can do it in 2 minutes here: [link]. It will ask for the document you travel with and a signature. Your data is sent encrypted and is only used by the Interior Ministry. Thank you and safe travels!»
Send it in the guest's language and repeat it 48 hours before arrival if it has not been completed.

Consistency: make everything match

The property details you register in SES.HOSPEDAJES (holder, tax ID, address, website) should be the same as in the Andalusian Tourism Register, on your website and on the platforms. If you change holder, address or website, update your SES.HOSPEDAJES sign-up too. The same inconsistencies that confuse an inspection confuse AI assistants when they cross-check what they find online.

How iQuota helps

iQuota does not send guest reports and does not replace SES.HOSPEDAJES or your check-in tool. The official page we publish for each property shows its name, address and registration code consistently, so search engines and AI assistants read the same details as everywhere else. We cannot guarantee that an AI will recommend you.

Want an official page with consistent registration details and direct booking? The first 30 hotels join free until 30 June 2027.

See the Founding Hotels programme

Frequently asked questions

Do I have to report guests if I rent my home as a private individual?

Yes. The decree covers non-professional hosts too. What a private host does not have to do is keep the register for 3 years.

How long do I have to report the data?

Immediately and within 24 hours at most from when the booking is made or cancelled and from when the stay starts.

Do I have to ask for the card number?

The decree mentions the payment method, its holder and expiry. The Ministry says only the data you already collect needs to be sent and that, for card, transfer or platform payments, the transaction must be identified. The official list of mandatory fields depends on a ministerial order we have not found published.

Has Brussels struck down guest registration?

No. In June 2026 the European Commission opened an infringement procedure, but that does not suspend the rule. It remains mandatory until it is amended.

Is there a different platform in Andalusia?

We found none. The Junta points to the Policía, the Guardia Civil and SES.HOSPEDAJES.

Sources

More guides for hotels

More guides for hotels →

Español