Anyone running a hotel has four main families of obligations: answering for the belongings guests bring into the hotel, reporting guests to the public security authority within 24 hours, ensuring the safety of the property, fire safety above all, and handling personal data correctly. On top of these come the administrative obligations: the start-of-activity notice, classification, and prices that must be communicated and displayed.
Contents
Who counts as a hotelier under the law
The relationship between hotel and guest arises from a contract, the so-called hotel contract, which isn’t governed by a single law but by a web of rules: the civil code for liability over belongings brought into the property, public security laws for registering guests, regional rules for requirements and classification, plus safety, hygiene and privacy rules that apply to any business open to the public.
One general principle runs through all of it: the hotelier is a hospitality professional, and the law asks for a higher standard of diligence than that of a private individual. They welcome people who sleep under their roof, with their belongings, their data and their safety: obligations follow from this that an ordinary shop or business doesn’t have.
On the administrative side, the business starts with a certified start-of-activity notice to the local council, while hotel classification into stars is awarded and checked according to the rules of the relevant region.
Liability for guests’ belongings: deposit in a hotel
This is the oldest and most misunderstood obligation. The civil code devotes a specific set of rules to “items brought into a hotel”, in articles 1783 and following, built on three levels:
The first level covers items brought into the hotel: for luggage and objects a guest keeps in the room, the hotelier is liable for damage, destruction and theft up to a hundred times the daily room rate. With a €120 room, the cap is €12,000. There’s no need to prove fault on the hotel’s part, liability arises from the simple fact of hosting the guest. The second level kicks in with items handed over for safekeeping: if the guest entrusts valuables to reception, or if the hotel refuses without good reason to accept them, liability becomes unlimited, and refusal is only legitimate for dangerous items or ones of excessive value relative to the property. The third level is the hotelier’s own fault, and here the hundred-day cap falls away: if the damage stems from the negligence of the hotel or one of its staff, liability is in full. The difference is felt in two mundane details, the in-room safe and the sign displayed at reception, which is the point where articles 1783 and following stop being theory.
Two practical warnings. First: signs saying “management is not responsible for items not deposited” have no legal force, because the law bans agreements that pre-emptively exclude this liability. Second: the guest has a duty to report the damage without unjustified delay, or they lose protection. An in-room safe doesn’t automatically transfer custody to the hotel, but its presence, together with reliable locks and correct procedures on the floors, concretely reduces disputed cases. There’s also the reverse phenomenon, guests taking room amenities away with them, and the line between amenities and misappropriation decides what you can take from a hotel.
Guest registration
Every accommodation business must report guests’ details to the public security authority. This is a requirement under the consolidated public security laws, now met electronically through the State Police’s Alloggiati Web portal:
- identifying every guest via a valid document on arrival;
- transmitting the data within 24 hours of arrival; for stays under a day, immediately after arrival;
- keeping records of the transmission receipts.
Failure to report is a criminal offence, not a mere administrative irregularity: it’s among the obligations taken most seriously in inspections, including for short-term rentals. Since 2024, with the tightening of rules on automated check-in, identification still requires a check matching the document to the person: fully “blind” self check-in isn’t considered compliant.
Linked to this is the statistical obligation: reporting tourist flows (arrivals and stays) to ISTAT through regional systems.
Safety, fire prevention and liability for the premises
The hotelier must ensure the property isn’t a source of danger. The most heavily regulated chapter is fire prevention: properties with more than 25 beds fall among the activities subject to Fire Brigade inspections and must comply with the specific technical rule for accommodation businesses, covering escape routes, fire compartmentation, detection and alarm systems, emergency plans and staff training. Among the obligations that directly touch the interiors is the fire safety regulation for hotel furniture, which requires certified fire-reaction classes for curtains, upholstery and mattresses.
The point often underestimated is that the obligation extends to furniture too. In accommodation businesses, materials must meet appropriate fire-reaction classes: carpets and coverings of a suitable class along escape routes, fabrics and upholstery with specific requirements, with the fire-resistance certificate for furniture to be kept on site and produced during inspections. Buying furniture without contract certifications means being exposed on a legal obligation, not just a quality question: it’s one of the reasons why the specifications for the projects we handle as a contract partner always list fire-reaction classes and certificates for every supply, with a single point of contact answerable for it from design through to handover.
Alongside fire safety sit the general obligations: safety of building systems, HACCP for breakfast and dining services, workplace safety for staff, and accessibility for people with disabilities in communal areas and dedicated rooms.
Prices, privacy and house rules
Prices communicated and displayed
Maximum rates must be reported through regional procedures and displayed visibly: the price list in the room isn’t an old-fashioned formality but an obligation still in force in most regions. The price actually charged can’t exceed the one displayed.
Personal data
With guests’ documents, the hotel processes personal data and must comply with the GDPR: a clear privacy notice, retention limited to what’s necessary, security measures on records, and caution with special category data (think of dietary or health needs guests communicate). Transmission to Alloggiati Web is a legal obligation and doesn’t require consent; commercial use of the same data, for example newsletters, does.
House rules
The hotelier can set house rules covering hours, access, animals, smoking and behaviour, provided they’re non-discriminatory and made known to the guest. The classic case is quiet hours: quiet rules in hotels balance guests’ rest with the manager’s duty of supervision.
Summary table of obligations
| Obligation | Source (general) | In practice |
|---|---|---|
| Liability for belongings | Civil code, arts. 1783 and following | Compensation up to 100 daily rates; unlimited for custody or fault |
| Guest registration | Public security laws | Alloggiati Web within 24 hours of arrival |
| Statistical flows | National statistical rules | Arrivals and stays via regional systems |
| Fire safety | Technical rule for accommodation businesses | Certifications, escape routes, rated furniture, trained staff |
| Prices | Regional rules | Reporting and displayed table |
| Privacy | GDPR | Privacy notice, limited retention, security |
| Hygiene and HACCP | Food safety rules | Self-monitoring for breakfast and dining |
The list can look burdensome, but there’s a positive way to read it: almost every obligation coincides with what a good hotel would do for its guests anyway. Looking after belongings properly, welcoming guests safely, being transparent on prices: the same substance as the service standards of hôtellerie, seen from the legal side.
Frequently asked questions
Is the hotelier liable for thefts from a room?
Yes, within precise limits. For items a guest keeps in the room, liability reaches up to a hundred times the daily room rate, without needing to prove fault on the hotel’s part. It becomes unlimited if the belongings had been handed over for safekeeping, if the hotel refused to accept them without good reason, or if the damage stems from the property’s negligence. Signs excluding all liability have no legal force.
Is a hotel obliged to accept every guest?
The hotelier is free to organise their business and can refuse a booking for objective reasons: no availability, failure to comply with house rules, previous damage. They can’t, however, refuse for discriminatory reasons such as nationality, religion or disability: in that case the refusal is unlawful and can be sanctioned.
What does a hotel risk by not registering guests?
Failing to report guests’ details to the public security authority is a criminal offence, punishable by arrest or a fine, on top of the administrative consequences for the licence in cases of repeated breaches. It’s one of the obligations checked most frequently in inspections, including for non-hotel accommodation and short-term rentals.
Does an in-room safe free the hotel from liability?
No. The safe is a useful security feature, but it doesn’t amount to handing items over for safekeeping and doesn’t wipe out the hotelier’s liability for belongings brought into the hotel. It does, however, reduce practical disputes and, together with reliable locks and correct staff procedures on the floors, demonstrates the property’s diligence in the event of a claim.
