“In the event of a security incident, Hilton will notify regulators and/or affected individuals in a timely manner as required by applicable laws and regulations.”
This analysis describes what Hilton's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The obligation to notify is conditioned on and scoped by applicable laws and regulations, meaning the timing, recipients, and form of notice depend on what law requires rather than a fixed internal standard.
The updated privacy statement now explicitly discloses that Hilton collects and may share Gender, Telephone, Arrival Time, Departure Date, and Spending Amount with third parties. These data categories were not previously listed in the disclosed collection practices. The statement continues to state that Hilton will not knowingly collect or disclose personal information from minors under the age of 14.
View change record →The updated policy expands disclosure of how Hilton properties use SMS and WhatsApp to contact guests during their stay. Properties may send welcome messages upon arrival, mid-stay reminders about the messaging service, and respond to guest requests via SMS or WhatsApp. The policy specifies that short code opt-in data will not be shared with third parties for their marketing purposes, and guests can opt out by replying STOP to any message. The policy also now explicitly discloses collection of WeChat account identifiers for linking Hilton Honors accounts to partner accounts. CCTV retention has been extended from 30 to 31 days. You can opt out of SMS or WhatsApp messages by replying STOP, or contact the hotel front desk to decline text messages.
View change record →If a security incident affects you, Hilton is obligated to notify you in a timely manner to the extent required by applicable laws and regulations.
How other platforms handle this
You will be notified via email and/or through a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information.
Written claims concerning copyright infringement must include the following information: A physical or electronic signature...A description of the copyrighted work...A description of where the allegedly infringing material is located...
We do not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser "Do Not Track" settings and/or signals or other mechanisms that provide consumers the ability to exercise choice...
"In the event of a security incident, Hilton will notify regulators and/or affected individuals in a timely manner as required by applicable laws and regulations.Excerpt from Hilton's Privacy Statement
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The obligation to notify is conditioned on and scoped by applicable laws and regulations, meaning the timing, recipients, and form of notice depend on what law requires rather than a fixed internal standard.
If a security incident affects you, Hilton is obligated to notify you in a timely manner to the extent required by applicable laws and regulations.
ConductAtlas has identified this type of provision across 266 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hilton.