In 2026, hotels are strictly prohibited from giving out personal information due to international privacy laws like GDPR (Europe) and various state-level privacy acts (USA). Under standard industry protocols, a hotel cannot confirm a guest's room number, provide a guest's phone number, or even confirm if a person is actually staying at the property to an unauthorized third party. This is a critical safety measure to protect guests from stalkers, corporate espionage, or domestic disputes. If someone calls the hotel asking for you, the front desk is trained to say, "I can check the system, one moment," and then either transfer the call without confirming the room number or take a message to be delivered to the room. The only exceptions are for law enforcement with a valid warrant or in the case of a verified medical emergency. Furthermore, hotels must secure your credit card and passport data using encrypted systems; any data breach that exposes this information can result in massive fines and legal liability for the hotel brand under modern data protection frameworks.