Understand the data involved
Reservations, contact details, preferences, messages and documents may contain personal data. Before using AI, the hotel should identify the purpose, lawful basis, parties involved and retention period for each workflow.
The presence of data in a system does not authorise its reuse for every purpose. A carefully scoped project avoids transmitting fields that are not required to produce the result.
Models and technology providers
The hotel needs to understand where data is processed, whether it is used for training, how long it is retained and which subprocessors are involved. Enterprise account settings can differ significantly from those of a free public tool.
Contracts, processing location, access control and deletion must be assessed before using real guest information.
Human oversight proportionate to risk
Answering a breakfast-hours question is not equivalent to changing a booking, accepting payment or responding to a serious complaint. The degree of autonomy should be configured for each task.
The responsible person must understand what the agent saw, what it proposed and why intervention is required. A generic approval box without context is not effective oversight.
Controls for safe operation
Use least privilege, separate test and production environments, keep usage records, test exceptional cases and provide a clear way to suspend the system. There should also be procedures for correcting inaccurate information and reporting incidents.
This guide is for general information and does not replace legal or data-protection advice for a specific project.
Frequently asked questions
Can AI be used with guest data?
It may be possible, but this depends on the purpose, data, lawful basis, providers and controls. A specific assessment is required.
Can guest data be used to train public models?
Do not assume that it can. The hotel must understand each provider’s contractual use of data and configure the service for the authorised purpose.
When should a person intervene?
Whenever the task exceeds its authority, has low confidence or may affect rights, payments, safety, commercial terms or another sensitive matter.