A hotel cannot disclose what room an individual is staying in. This would be considered a violation of the individual's right to privacy. A hotel, however, may disclose whether or not an individual is a guest at the hotel unless the guest expressly instructed the hotel staff not to do so.

In 2026, the disclosure of guest information is strictly governed by global data privacy laws like the GDPR (Europe) and the CCPA (California). Hotels are generally prohibited from disclosing your presence at the hotel or your personal details to third parties—including curious family members or private investigators—without your explicit consent. There are, however, three major exceptions: legal warrants, public safety emergencies, and administrative requirements. If local police present a valid subpoena or warrant, the hotel must comply. Additionally, in many countries, hotels are legally required to submit "Guest Registration" data (including passport copies) to national police databases for security monitoring. Outside of these legal mandates, a hotel that leaks your room number or personal info could face massive fines (up to 4% of their global turnover under GDPR). For high-profile guests in 2026, many hotels now offer "incognito" check-ins or use aliases to add an extra layer of privacy against the increasingly digital nature of the hospitality industry.