Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Airbnb maintains a separate privacy notice specifically addressing DAC7-related data processing, which governs personal information collected about individuals (including hosts) for EU platform economy tax reporting purposes, potentially including individuals who are not direct Airbnb account holders.
This analysis describes what Airbnb's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The DAC7 Privacy Notice indicates that Airbnb processes personal data for EU tax authority reporting obligations that may apply to individuals regardless of whether they have a direct contractual relationship with Airbnb, creating a distinct processing purpose and notice obligation separate from the main user privacy policy.
Interpretive note: The operative terms of the DAC7 notice are not reproduced in this index page; assessment of compliance adequacy depends on the content of the linked notice document.
This provision establishes that hosts and sellers subject to EU DAC7 reporting obligations may have their personal and financial data processed and reported to EU tax authorities by Airbnb; the applicable terms are contained in a separate notice rather than the main Privacy Policy.
Cross-platform context
See how other platforms handle Non-User DAC7 Privacy Notice and similar clauses.
Compare across platforms →Monitoring
Airbnb has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Non-User DAC7 Privacy NoticeExcerpt from Airbnb's Privacy Policy
1) REGULATORY LANDSCAPE: The DAC7 Directive (EU Council Directive 2021/514/EU) requires digital platform operators to collect, verify, and report seller income and identification data to EU member state tax authorities. This processing engages GDPR Articles 6(1)(c) (legal obligation) as a likely lawful basis, and GDPR Article 14 (information to data subjects not directly collected from) for non-user data subjects. Enforcement authority is distributed across EU member state tax agencies and data protection supervisory authorities. 2) GOVERNANCE EXPOSURE: High. Processing personal data of non-users for regulatory reporting purposes creates distinct GDPR exposure, particularly under Article 14, which requires that data subjects receive specific information about the processing within one month of data collection. Failure to provide adequate Article 14 notices to non-user data subjects is an area of active regulatory scrutiny across EU member states. 3) JURISDICTION FLAGS: Exposure is specific to EU/EEA member states where DAC7 obligations are operative. Hosts or sellers receiving rental income reportable under DAC7 thresholds are the primary affected population. Non-EU jurisdictions are not directly implicated by this notice. 4) CONTRACT AND VENDOR IMPLICATIONS: Platforms or agents acting as intermediaries between hosts and Airbnb may need to assess whether DAC7 data flows create downstream data sharing or processing obligations. The existence of a Non-User notice suggests Airbnb has identified a processing population outside its standard user base, which may affect vendor and partnership agreements with host management companies or property managers. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that Article 14-compliant notices are delivered to all non-user data subjects subject to DAC7 reporting, including the identity of the controller, the legal basis for processing, data retention periods, and the right to access and object. The content of the Non-User DAC7 Privacy Notice should be reviewed to verify it meets these requirements; the notice text is not reproduced in this index page.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The DAC7 Privacy Notice indicates that Airbnb processes personal data for EU tax authority reporting obligations that may apply to individuals regardless of whether they have a direct contractual relationship with Airbnb, creating a distinct processing purpose and notice obligation separate from the main user privacy policy.
This provision establishes that hosts and sellers subject to EU DAC7 reporting obligations may have their personal and financial data processed and reported to EU tax authorities by Airbnb; the applicable terms are contained in a separate notice rather than the main Privacy Policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Airbnb.