Regulatory background

What is the Spanish guest registry?

The Spanish guest registry is a legal duty, owed by anyone running a paid accommodation in Spain, to identify each person who stays the night and to forward a defined data set to a police authority within 24 hours. The duty itself has existed in some shape since the late 1950s; what changed in late 2024 was the depth of data, the digital nature of the submission, and the willingness of the central administration to enforce it with serious money. For a non-resident owner, the registry is the most operationally intrusive of all the Spanish obligations attaching to a short-term rental, because it fires on every single arrival rather than on every booking, contract or tax period.

From a 1959 paper ledger to a digital register

The duty to record traveller details in lodging establishments has roots in Decree 1513/1959, which required hotels and similar businesses to keep a paper libro registro and to forward identity details to the local civil-guard or police authority. The framework was updated in 2003 by Order INT/1922/2003, which introduced the standardised parte de viajeros (the traveller form), but submission remained physical: faxed or hand-delivered sheets, scattered across regional comisarías, with no national consolidation.

By the 2010s the proliferation of online holiday-rental platforms exposed the limits of this system. Tens of thousands of homes were being let to short-stay travellers without any of them appearing in the police register. Two trends pushed reform forward: a sustained terrorism alert that highlighted the security utility of a usable lodging register, and a Spanish administrative-modernisation programme that pushed paper procedures into digital channels. The result was Royal Decree 933/2021, of 26 October, published in the official gazette on 28 October 2021 and intended to take effect after a brief adaptation period.

It did not. The original entry-into-force date of 2 January 2023 was followed by a five-month grace period to 2 June 2023; that was extended to 31 January 2024 and then again to 31 October 2024 under pressure from the hospitality sector, which argued — accurately — that neither the technical platform nor the supply chain of compliance tools was ready. The regime became fully enforceable on 2 December 2024, and the first wave of administrative sanction proceedings started in the early months of 2025.

Why the regime was introduced

The preamble to Royal Decree 933/2021 sets out two purposes. The first, openly stated, is public security: a centralised, real-time-ish record of who is staying in regulated accommodation in Spain contributes to crime prevention and investigation, particularly in the field of counter-terrorism. The constitutional basis is the Organic Law 4/2015 on the Protection of Citizen Security, whose articles 25 to 27 give the Spanish government the legal authority to impose identification and reporting duties on activities that involve hosting people overnight. The decree implements that empowerment for the specific case of lodging.

The second purpose is administrative modernisation. The paper system did not scale; it failed to produce consolidated national data; and it depended on each provincial comisaría handling its own intake. The decree introduces a single technical platform — SES.Hospedajes, operated through the Sede Electrónica of the Ministerio del Interior — and three modes of access: a manual web form for low-volume operators, file upload for bulk submission, and a REST API for those who can integrate. The same logic applies in Catalonia and the Basque Country, though those communities run their own equivalent platforms in line with their statutory police competencies.

Who counts as an obligated party

The decree uses the term sujeto obligado — obligated party — to describe anyone subject to the duty. It captures any natural or legal person who runs a lodging activity, and it explicitly lists the categories that matter:

• Hotels, hostels, guesthouses, boarding houses, paradores, mountain refuges, monasteries and similar establishments.
• Tourist apartments and apart-hotels.
• Holiday-use dwellings, whatever each autonomous community calls them: VFT in Andalusia, VUT in the Community of Madrid and several others, HUT in Catalonia, ETV in the Balearic Islands, VV in the Canary Islands, and so on.
• Rural houses (casas rurales).
• Campsites, camping areas, and authorised motorhome areas.
• Tourist hostels and youth hostels.
• Digital intermediation platforms: Airbnb, Booking, Vrbo, Expedia, HomeToGo and similar players, who carry their own parallel duty to report bookings and cancellations.

The decree applies regardless of how the activity is organised in tax terms, regardless of nationality, and regardless of whether the owner is resident in Spain. If the property is in Spain and people sleep in it for payment, the owner is obligated.

The platform-specific duty for intermediaries

Platforms have an obligation that runs in parallel to the host's. Within 24 hours of confirming a reservation and within 24 hours of cancelling one, the platform must report that booking event to SES. The platform's obligation does not, however, exempt the host from reporting the actual arrival. The two events are different: a booking is a contractual commitment, a check-in is a physical fact. Both must be reported separately, by different parties, on different timings. Owners who think Airbnb is handling everything are mistaken, and that mistake is one of the most frequently sanctioned patterns.

Professional and non-professional hosts

Within the universe of obligated parties, the decree draws a distinction between professional hosts and non-professional hosts. The line matters for one specific reason: the duty to keep a documentary archive.

A professional host is one who lets accommodation as an economic activity in a habitual way, is registered with the autonomous community's tourism register, and operates under the relevant regional tourism rules. A non-professional host is typically a private individual who occasionally lets a room in their primary residence, or a second-home owner who lets the property for a small number of weeks a year. The frontier is grey: several properties let a few weekends each, or one second home let for the summer, can fall on either side depending on frequency, dedication and intent. Tax treatment is one indicator but not a decisive one.

Both categories must communicate the guest data on each stay, on identical timing, with identical fields. Only professional hosts are obliged to keep the documentary archive for three years: the signed parte, the data submitted, and the receipt from SES. Non-professional hosts may choose to keep their records voluntarily — and probably should, as evidence in case of a later audit — but the legal obligation does not bite.

The three regional platforms

Royal Decree 933/2021 does not impose SES.Hospedajes uniformly across Spain. Two autonomous communities — Catalonia and the Basque Country — have their own integral police forces (the Mossos d'Esquadra and the Ertzaintza respectively) and operate guest-registration systems separately from the central platform.

SES.Hospedajes (most of Spain)

SES.Hospedajes is the Ministerio del Interior's module within its Sede Electrónica. It accepts manual web submissions, XML file uploads against the official schema, and REST API integrations. To use it, the host (or their representative) needs an FNMT Digital Certificate or activated Cl@ve credentials. The platform issues each registered property a unique establishment code starting with H. Submissions return a receipt with a transaction reference, which functions as proof of timely communication.

Mossos d'Esquadra (Catalonia)

If your property is in Catalonia, you do not use SES. The Generalitat de Catalunya, through the Direcció General de la Policia, runs registreviatgers.mossos.gencat.cat. The data set is materially the same as Annex I of RD 933/2021, but the channel is different: at the time of writing the Catalan portal does not expose a public API, and the standard submission mode is a file upload in the Generalitat's defined format. The 24-hour deadline and the three-year retention apply in the same way as for SES.

Ertzaintza (Basque Country)

The Basque Country runs an equivalent system through its own regional police, the Ertzaintza, in parallel to Catalonia and similarly outside the SES platform. The technical channel is run by the Department of Security of the Basque Government. The substantive rules — fields, deadline, retention — line up with the national framework.

Digital identification: a hurdle, not a barrier

Every submission to any of the three platforms must come from an identified, electronically authenticated submitter. For SES that means an FNMT certificate or Cl@ve; for the Catalan portal it means digital certificates accepted by the Generalitat (idCAT, FNMT and a few others); for the Ertzaintza it means certificates accepted by the Basque Government. All three presuppose Spanish identity infrastructure — a NIE or DNI — which is precisely the piece a foreign owner often lacks.

The path of least resistance, for an owner without a Spanish digital credential, is representation. Spanish administrative law allows any party to appoint a representative to act before the public administration; the appointment is recorded in the Registro Electrónico de Apoderamientos (REA) and can be specific (limited to one procedure) or general. For the SES context, a specific power of representation covering the guest-registry procedure is sufficient and standard. The representative — a gestoría, a property manager, or a specialist compliance provider — uses their own digital credential to submit on the owner's behalf, while the owner remains the legal addressee of the obligation.

How this regime sits next to other obligations

Owners frequently confuse the guest registry with other Spanish duties that affect rentals. They are independent, with different authorities and different penalties. The cleanest mental model is to keep four boxes separate:

• Tourism licence (autonomous community) — a precondition for advertising the property, granted by the regional tourism office. Without it, the activity is informal and exposed to a separate set of fines.
• Guest registry (Ministerio del Interior / Mossos / Ertzaintza) — the subject of this site. Identity reporting per stay.
• Tourist tax (autonomous community, where applicable) — Catalonia, the Balearic Islands and parts of the Valencian Community impose a per-night tax that the host collects and remits.
• Income tax (state) — for non-resident owners, the IRNR via Modelo 210 governs rental income from Spanish property. Some communities also collect IBI (council tax) on the property itself.

A non-compliant filing in one box does not contaminate the others legally, but in practice a sanction in the guest-registry box becomes evidence that the tourism authority and the platform can both use. Cumulative non-compliance is what attracts serious enforcement.

The Spanish guest registry is not a paperwork ritual: it is the operational mirror of the state's claim to know who is sleeping where in the national territory, every night. For a foreign owner, the only thing that distinguishes the duty from any other is the access route — and the access route has a clear, well-trodden workaround. Editorial note