Booking.com removed a dedicated privacy section that previously explained how it and its insurance partners handle personal data when you purchase insurance products through the platform. The section previously clarified that both Booking.com and the insurer are jointly responsible for how your data is used, and encouraged you to review the insurer's privacy notice. This section is no longer in the updated privacy statement as of May 5, 2026.
Consumers: Booking.com no longer has a distinct section explaining how your data is handled when you buy travel insurance; you must find this information in general policy sections instead.
Booking.com previously had a distinct section explaining that when you buy travel insurance through its platform, both Booking.com and the contracted insurer separately determine how your personal data is handled, and it encouraged you to read the insurer's privacy notice. This dedicated clarification has been removed as of May 5, 2026. The removal means travel insurance data practices are now described only in the general sections of the privacy policy rather than in a product-specific subsection. If you purchase travel insurance through Booking.com, your data handling practices and the division of responsibility between Booking.com and the insurer are no longer clearly signposted in a dedicated section; you will need to review the general sections of the privacy notice and the insurer's own privacy materials to understand how your data is processed.
→ If you purchase travel insurance through Booking.com, review the general sections of Booking.com's updated privacy notice to understand how your data is handled.
→ Request and review the contracted insurer's privacy notice separately to understand the insurer's independent data handling practices.
This is the 2nd significant Transparency Removal change Booking.com has made since ConductAtlas began monitoring.
ConductAtlas has recorded 3 material changes to this document (since April 2026). An additional minor or cosmetic changes were excluded.
2 of Booking.com's significant changes have been classified as negative for consumers.
Removed dedicated language clarifying joint data responsibility between Booking.com and insurers when consumers purchase travel insurance, and removed encouragement to review insurer privacy notices.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Booking.com removed a dedicated Insurance privacy subsection (previously covering US Insurance and general insurance data handling) that had explicitly stated joint responsibility between the platform and contracted insurers, and encouraged consumers to review insurer privacy …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001634.
The change appears to be a technical update to Booking.com's WAF (Web Application Firewall) challenge page, updating nonce values and …
The detected change consists of updates to nonce values and timestamps in the HTML security infrastructure of Booking.com's challenge page, …
Booking.com's privacy policy has been reorganized to separate US (non-California) residents from California residents, with California-specific protections removed and replaced …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.