EU Regulation 2024/1028 & Short-Term Rentals in Spain

Two headlines landed in the same week. On 20 May 2026, Regulation (EU) 2024/1028 on data collection and sharing for short-term rentals began to apply across the European Union. Almost simultaneously, Spain’s Supreme Court annulled the state single registry (NRUA)¹.

The regulation sets that date itself, and leaves Member States no room to move it:

“This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union. It shall apply from 20 May 2026. This Regulation shall be binding in its entirety and directly applicable in all Member States.”

“Directly applicable” means there is no Spanish statute transposing it and no extra deadline to run down: since 20 May 2026 the obligations bind platforms and administrations exactly as written.

Read together, the two headlines point in opposite directions: one sounds like a brand-new European obligation, the other like the registry everyone had been bracing for no longer exists. Hence the questions doing the rounds. Do I need to register somewhere new? Somewhere European?

The people with most riding on the answer are managers whose properties are spread across several autonomous communities, because each dwelling drags its own regional registration behind it, and each registration its own number.

What Regulation 2024/1028 is

It is the rule that harmonises, across the 27 EU countries, how activity data from short-term rentals offered through platforms (Airbnb, Booking, Vrbo and the like) is collected and shared. It does not regulate prices, zones, or who may rent. It regulates data.

And it defines that data precisely, in Article 3:

“the number of nights for which a unit is rented and the number of guests to whom the unit is rented per night along with the country of residence of each guest”

Nothing in there identifies an individual guest: these are counts and countries of residence. The property’s specific address and the listing URL are not activity data, though they travel alongside it, with the registration number, when the platform files its report⁴.

The regulation splits the work between four actors, and none of them does another’s job:

It has three pieces:

1. Host registration schemes, in Article 4. Where a registration procedure exists, the Member State must ensure that:

   • it can be completed online, free where possible or at a reasonable and proportionate cost;
   • it issues a registration number per property automatically and immediately, and that the number contains no personal data;
   • one property is not subject to more than one registration procedure;
   • technical means exist to update the data, check the number’s validity, and remove the property from the registry;
   • the numbers sit in a public and easily accessible registry;
   • the host is obliged to declare the number to the platform when listing⁵.

2. Platform obligations, in Articles 7 and 9. The regulation calls the first set “compliance by design”, and there are three of them, in this order:

   • ask the host to self-declare whether the property sits in an area with a registration procedure;
   • where one exists, require the number before allowing the offer and display it clearly on the listing;
   • check afterwards, randomly and periodically, that the declaration and the number are valid⁶.

   On top of that comes the data filing: per-property activity data, with its registration number, the specific address and the listing URL, to the single digital entry point of the Member State where the property sits. Transmission is monthly, with one exception: small and micro platforms that did not reach a monthly average of 4,250 listings in the previous quarter file at the end of the quarter, and may do it manually⁴.

3. Single digital entry point, in Article 10. Each Member State with registration procedures sets up a single digital entry point for that data and designates the authority responsible for running it. The bodies that receive and use the data are each territory’s competent authorities, and for two purposes only: monitoring compliance with the registration procedures and enforcing the rules on access to and provision of short-term rental services⁷.

The order of that third platform obligation matters more than it looks, because the check is not a pre-publication filter:

“make reasonable efforts to randomly check on a regular basis, declarations of the hosts concerning the existence or not of a registration procedure […] and, where such a procedure exists, the validity of the registration number provided by the host, through the use of the functionalities offered by the single digital entry points […], after allowing the offering of the short-term accommodation rental services by the host.”

For you the consequence is one of timing. A mistyped or expired number can clear the listing process without trouble and fall weeks later, when the sampling cross-checks it against the regional registry. And the platform does not decide on its own at that point: it reports the result to the competent authority and to you, and it is the authority that suspends the number and orders the listing down⁶.

To register, the host files a declaration per property with:

• the specific address, with the number, the floor, the cadastral reference or whatever it takes to identify it precisely;
• the type of unit;
• whether it is offered as a primary residence, a secondary one, or for other purposes;
• the maximum number of beds and guests;
• whether it is subject to an authorisation regime and, if so, whether the host has obtained one⁸.

To that are added the host’s contact details: name, identification number, address, phone and email for the authority’s written communications⁸. Competent authorities may verify the declaration at any time. If they ask for a correction and none arrives, they suspend the registration number and order the platform to take the listing down⁹.

What Regulation 2024/1028 does NOT do

This is half the confusion. The European regulation:

• Neither legalises nor bans any tourist rental. Licences, zone caps and restrictions remain national, regional and municipal powers.
• Creates no European registry. It requires the registration procedures each state sets up, national, regional or local, to meet a common set of conditions, not that a new one exists, and not that it be state-level⁵.
• Does not turn the platform into an authority. It can ask you for the number, display it and check it, but taking a listing down over an invalid number is ordered by the administration⁹.
• Does not replace guest registration. The traveller registry under RD 933/2021 is a public-security obligation of the Interior Ministry, entirely separate from this rule.

It is worth nailing down that last distinction, because it is the one people mix up most. One thing is the data about the property: how many nights it is rented, how many guests per night, where it sits, and what registration number it carries. Quite another is the data about each guest who stays the night, with their name, their document and their home address, which is what Spain’s guest report demands. Two parallel circuits that never touch.

Does the NRUA annulment clash with Regulation 2024/1028?

No. The Spanish Government justified the state single registry (NRUA) precisely on this regulation, and the Supreme Court dismantled that argument: the European rule requires registries and procedures to exist, not to be state-level. In Spain tourism is a regional power, so the regulation is satisfied through the regional registries and the single digital entry point, which the ruling expressly keeps standing.

For you that has a concrete translation: the number the platform asks you for and cross-checks today is your regional registration number. The state-level number that had been announced ceased to exist with the ruling, so there is no state procedure to complete and no state number to publish.

The regulation demands outcomes: reliable data and numbers visible on listings. How each country organises itself internally is its own business.

What Regulation 2024/1028 changes for you, by profile

The deep change is not a new procedure but visibility. With platforms filing activity every month (every quarter for the smallest ones) through the single digital entry point, operating without a licence or with inconsistent data leaves an ever-wider trail⁴.

And the regulation obliges every Member State to keep in its own law the tool for acting on that trail:

“Where a registration procedure applies, Member States shall ensure that national law enables the competent authorities to order providers of online short-term rental platforms to provide the requested information and to remove listings concerning units offered without a registration number or with an invalid registration number, or in cases involving the misuse of a registration number.”

No valid number, no listing, but the two decisions do not come from the same place. Your autonomous community suspends or withdraws the number it issued. The resolution ordering a listing to be removed or its access disabled is issued in Spain by the Ministry of Housing and Urban Agenda, through the Directorate-General for Planning and Evaluation, which the Digital Single Window for Rentals reports to¹⁰. The platform is not the authority at either step: it receives the order and has 48 hours from notification to comply¹⁰.

Three checks to comply with the EU regulation

Now that the regulation applies, three checks will do:

1. Your regional registration number is in order and appears on every listing. If the property is on Booking, Airbnb and Vrbo, the number has to show on all three. If you don’t have one yet, check the requirements by region.
2. The data you declared matches reality. Address, capacity and type of use must square with what the listing says. If they don’t, the authority can suspend the number, and the listing falls with it.
3. The guest report runs on its own track. Don’t conflate it with the property registry. Every stay, every guest, its own submission to the police. The European regulation does not change that.

If you operate in Catalonia or the Basque Country, the guest report there does not go to SES.HOSPEDAJES at all. It goes to the Mossos d’Esquadra and the Ertzaintza through their own channels, quite apart from whatever the regulation says about property registries.

FAQ

Do I have to register somewhere new because of the EU regulation? No, the EU regulation does not send you to register anywhere new. If your property is registered with your autonomous community’s tourist registry and the number appears on your listings, there is no additional procedure for you.

Does the EU regulation require filing guest reports? No, the EU regulation does not require filing guest reports. The guest report is a Spanish obligation under RD 933/2021, older and independent. It keeps working exactly as before, with its deadlines and its penalties.

Will platforms share my data with the tax authorities? Platforms do not share your data with the tax authorities because of this regulation: what they file is activity data, and it goes to the single digital entry point for your territory’s competent authorities to use, for two stated purposes. For tax purposes other routes already existed, such as platform reporting models. The net result is the same: more data crossing, less room for inconsistency.

What happens if the platform finds my listing has no registration number? If the platform finds your listing has no registration number where registration is required, it cannot keep the offer up: the regulation makes it require the number before letting you offer the property and display it on the listing. When a later random check turns up an invalid or misused number, the platform reports it to the competent authority, and it is that authority that suspends the number and orders the listing taken down. No valid number, no listing.

When does it start to apply? Regulation (EU) 2024/1028 has applied since 20 May 2026 across the EU. From that date the verification and data-sharing obligations are enforceable, with no need for a Spanish rule to implement them.

What stays the same: every guest, their report

While the property registries get reshuffled, the daily operational obligation has not moved a millimetre: collect every guest’s data and report it to SES.HOSPEDAJES within 24 hours, in Spanish, on a platform with no English interface. That part, the one that repeats with every booking, is what RegistroViajero automates: digital check-in, validation, and submission of the guest report to the Ministry without typing a thing.

The European regulation changes how your properties look from the outside. The guest report is still what you have to do for every stay.