Yes, many hotels can inspect and sometimes scan a passport at check-in, but keeping a copy depends on local law and privacy rules.
Handing over your passport at a hotel desk can feel routine right up to the second someone says, “We need to make a copy.” That’s when a simple check-in turns into a privacy question. Are they allowed to do that? Do you have to agree? And what should you do if the request feels off?
The honest answer is not the same in every country. Hotels often have a legal duty to verify who is staying on the property. In some places, they must collect guest details for police or tourism records. In other places, they may only need to view the document, write down certain details, and move on. The gap between “check your passport” and “keep a full copy of it” is where the rules start to matter.
If you want the plain version, here it is: a hotel can often ask to see your passport, and in some places it can scan or copy it. But that does not mean every full photocopy is proper. A passport holds more data than a hotel usually needs, so the hotel should have a clear legal reason, collect only what is needed, and protect that data once it has it.
Why Hotels Ask For Your Passport At Check-In
Hotels are not asking out of curiosity. They usually want one or more of these things:
- To confirm that the booking name matches the guest in front of them.
- To meet local guest-registration rules.
- To record nationality, passport number, or arrival details where law requires it.
- To reduce fraud, chargebacks, or room misuse.
- To meet visa, immigration, or police reporting duties in some places.
That means the request itself is not strange. What matters is the scope. Looking at a passport and recording the name, document number, and nationality is one thing. Keeping a full image of the photo page, with every visible detail, is a bigger step.
Can Hotels Make A Copy Of Your Passport? Local Rules Decide
“Can hotels make a copy of your passport?” has a short answer and a longer one. The short answer is yes, sometimes. The longer one is that the hotel needs a lawful basis under the rules where the hotel operates.
That is why travelers get mixed answers online. One hotel clerk may say, “We always scan passports.” Another may say, “We only need to view it.” Both may be right in their own country. Spain is a good example of why local law matters: Spain’s data protection authority has said that lodging businesses may need to collect guest data, yet that does not automatically permit keeping a full copy of the ID document. The agency ties that point to the data minimisation rule.
That same idea runs through the official text of the GDPR: collect data that is adequate, relevant, and limited to what is needed for the stated purpose. A hotel that needs your passport number may not need a permanent image of the whole photo page. A hotel that must file a scan under local registration law may be on firmer ground, as long as it stores the file safely and does not keep it longer than needed.
Across Europe, there is another clue in official travel guidance. Your Europe says that for some short stays, a hotel can often handle the reporting step after you fill in the required form. That shows why hotels ask for identity details in the first place, even though it does not mean every hotel gets a free pass to keep a full copy. See Your Europe’s short-stay reporting page.
| Hotel Action | When It Is Often Fine | What Makes It Risky |
|---|---|---|
| Viewing the passport at the desk | Identity check at arrival | Clerk keeps the document out of sight too long |
| Writing down your name and passport number | Local guest-registration rules require it | They collect more fields than local law needs |
| Scanning the photo page | Local law or a clear lawful basis allows it | No clear reason, no notice, weak storage |
| Keeping a photocopy in paper files | Only where law or a valid business need backs it | Open binders, front-desk access, long retention |
| Taking a phone photo of the passport | Rarely a good sign in a normal hotel flow | Personal device use, loose sharing, no controls |
| Emailing a passport copy before arrival | Some properties request it for local filing | Unencrypted email, vague reason, no privacy notice |
| Asking for consent to keep a copy | May matter where law does not require the copy | “Consent” is pushed as mandatory without options |
| Redacting extra data on a copy | Can trim exposure where a full copy is not needed | Hotel refuses a lawful, narrower option |
What A Hotel Usually Needs Versus What It Wants
This is the part most travelers miss. A hotel may want a full copy because it is easy, familiar, and quick for staff. That does not always mean it needs one.
A passport carries your full name, photo, nationality, birth date, document number, and more. A hotel may only need a slice of that data. If local law calls for a registration card with set fields, the hotel should stick to those fields. If the clerk says, “We copy every passport because it’s our policy,” that still leaves room for a fair question: is the full copy required by law, or is it just how this property does things?
That distinction matters most in places with strong privacy rules. A broad “we always do it” policy can clash with data minimisation if the same job can be done with less data.
Red Flags That Should Make You Pause
A normal passport check does not need to feel shady. Pause if you run into any of these:
- The staff member wants to take your passport away from the desk.
- The hotel cannot explain why it needs a copy.
- The copy will be kept on a personal phone or sent by chat app.
- You are told “everyone does this” instead of being given a legal reason.
- There is no privacy notice, no retention period, and no answer about storage.
One red flag does not always mean the hotel is doing something unlawful. It does mean you should ask sharper questions before handing over more data than needed.
What To Say If You Are Not Comfortable
You do not need to turn the lobby into a courtroom. A calm, simple script works better.
- Ask what law or policy requires the copy.
- Ask whether they can just record the needed details instead.
- Ask how long the copy is kept and who can access it.
- Ask whether you can mask extra fields if a copy is still requested.
- Ask for a manager if the answer stays vague.
You can also say: “I’m happy to show my passport for verification. If a copy is needed, can you tell me what rule requires it and what data you store?” That keeps the tone steady while making it clear you are paying attention.
| Situation | Best Response | Why It Works |
|---|---|---|
| Clerk wants to inspect the passport | Hand it over briefly at the desk | That is normal check-in practice |
| Clerk wants a photocopy with no reason | Ask what rule requires it | Separates legal duty from habit |
| Hotel asks for an email copy before arrival | Ask whether a secure portal or in-person check is possible | Email is easy to mishandle |
| Staff wants a photo on a private phone | Decline and ask for a desk scanner or manager | Personal devices add risk |
| Copy is required by local registration law | Comply, then ask about storage and deletion | You still have a right to clear information |
What Hotels Should Be Doing With Passport Data
A well-run hotel does more than collect the document. It should also handle the data with care. Good practice usually includes:
- Collecting only the fields needed for check-in or legal reporting.
- Explaining why the data is being taken.
- Restricting access to trained staff.
- Storing scans in a controlled system, not loose folders.
- Deleting or destroying copies when the retention period ends.
That matters because passport data is a gift to identity thieves. A sloppy front desk, open printer tray, or shared inbox turns a routine check-in into a real risk.
What This Means For Travelers
If a hotel asks to see your passport, that is usually normal. If it asks to copy it, the request may still be proper, though the right answer turns on the country, the local guest-registration rules, and the hotel’s privacy duties.
So the smart move is not to assume “yes” or “no” every time. Show the passport. Ask why a copy is needed. Ask how it will be stored. Ask whether a narrower option will do. That small pause can tell you a lot about whether the property is following the rules or just following a habit.
For many travelers, that is the sweet spot: cooperative, polite, and not careless with a document that carries a lot more than your room number.
References & Sources
- Agencia Española de Protección de Datos (AEPD).“La AEPD informa de que no está permitido solicitar una copia del DNI o pasaporte en hospedajes.”States that collecting guest data for lodging records does not by itself allow a business to demand a full copy of an ID or passport.
- EUR-Lex.“Regulation (EU) 2016/679 (GDPR).”Provides the data minimisation rule and the wider legal basis for processing personal data in the EU.
- Your Europe.“Reporting Presence For Short Stays Of Less Than 3 Months.”Explains that for some short stays a hotel may handle the reporting step after collecting the required identity details.
