Airbnb maintains separate privacy supplements for at least seven geographic jurisdictions, indicating that applicable data rights, processing terms, and disclosures vary by the user's country of residence or location.
This analysis describes what Airbnb's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The existence of jurisdiction-specific supplements indicates that data subject rights (such as access, deletion, portability, and opt-out), lawful processing bases, and data sharing disclosures are defined at the supplement level and are not uniform across Airbnb's user base.
Interpretive note: The operative content of each geographic supplement is not reproduced in this index page; compliance assessment requires review of individual supplement documents.
The addition of region-specific privacy supplements indicates Airbnb has implemented differentiated privacy policies across multiple jurisdictions, reflecting compliance with increasingly diverse regulatory requirements.
View full change record →Under this structure, the specific data rights available to a user, including the right to access, delete, or restrict processing of personal information, are defined in the geographic supplement applicable to their location rather than in the main Privacy Policy.
Cross-platform context
See how other platforms handle Geographic Privacy Supplements and similar clauses.
Compare across platforms →"Outside the United States Privacy Supplement United States Privacy Supplement Brazil Privacy Supplement China Privacy Supplement Korea Privacy Supplement Colombia Privacy Supplement Türkiye Privacy SupplementExcerpt from Airbnb's Privacy Policy
1) REGULATORY LANDSCAPE: Each geographic supplement engages the data protection regime of its target jurisdiction: GDPR and national implementing legislation for EU/EEA users (Outside the United States supplement); CCPA/CPRA for California residents (United States supplement); …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The existence of jurisdiction-specific supplements indicates that data subject rights (such as access, deletion, portability, and opt-out), lawful processing bases, and data sharing disclosures are defined at the supplement level and are not uniform across Airbnb's user base.
Under this structure, the specific data rights available to a user, including the right to access, delete, or restrict processing of personal information, are defined in the geographic supplement applicable to their location rather than in the main Privacy Policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Airbnb.