The Norwegian Data Protection Authority (Datatilsynet) has initiated an audit of the hotel sector concerning the security of personal data during booking processes.

This action follows the receipt of several reports, complaints, and information regarding breaches of personal data security. These breaches are linked to systematic fraud attempts targeting customers after their hotel bookings, a phenomenon observed in several hotels and chains. The authority aims to assess the extent and causes of these frauds and to verify whether hotel chains have implemented adequate technical and organizational measures to ensure the security of information. The audit will take place in two phases, starting with a written inspection followed by on-site inspections at selected establishments. The written phase has been launched with three hotel groups, THON GRUPPEN AS, STRAWBERRY HOTELS AS, and CITYBOX AS, who must respond by October 5.