Guest Wi-Fi compliance, data retention, and privacy
Hospitality guest Wi-Fi operates under two competing legal demands: statutory telecommunication log retention mandates and strict personal data protection frameworks.
RM-WiFi resolves this tension architecturally. Connection records follow local statutory regulations while personal data remains protected under UK GDPR, PDPA, and UU PDP.
Log retention balanced against guest privacy
Statutory telecommunications regulations and digital crime acts require network operators to retain traffic records in line with local regulations to assist law enforcement investigations. Conversely, privacy regulations such as the UK GDPR and EU GDPR prohibit indefinite surveillance, indiscriminate data retention, and unnecessary collection of personal identifiers.
RM-WiFi resolves this conflict by separating technical network logs from personal guest profiles:
- Technical connection logging
- Network records capture MAC address, assigned local IP address, connection start time, session duration, and bytes transferred via RADIUS accounting (RFC 2866).
- Zero URL and content inspection
- The gateway logs network association data only. Deep packet inspection, browsing history, and DNS lookups are never recorded or stored.
- Automated lifecycle purging
- Session logs follow local statutory retention regulations for your venue's jurisdiction and purge automatically once the statutory window expires, preventing unlawful permanent data hoarding.
- Segregated data stores
- Network connection logs reside in tamper-evident audit tables isolated from marketing databases and customer relationship records.
Unbundling marketing consent from network access
Under UK GDPR Article 7(4) and international privacy frameworks, internet connectivity cannot be conditional on consent to receive marketing material or profiling. Wi-Fi access must remain unbundled from marketing consent.
RM-WiFi enforces compliant consent architecture across all captive portal screens:
- Freely given consent
- Network terms of service are accepted separately from marketing communications.
- Unchecked opt-in defaults
- Marketing opt-in checkboxes remain unchecked by default. Pre-ticked consent boxes are strictly prohibited.
- Identical service delivery
- Guests who decline marketing receive full network access with identical speed, bandwidth tiers, and session durations as consenting guests.
- Granular consent audit trails
- When a guest grants marketing consent, RM-WiFi records the exact policy version, timestamp, IP address, and opted channels (email or WhatsApp).
Room and surname validation for staying guests
Standard commercial captive portals treat every hotel resident as an unknown visitor, forcing even direct-booked guests to complete marketing forms before granting Wi-Fi access. RM-WiFi tailors the login flow to how the guest booked.
Staying guests authenticate directly against the Property Management System (PMS) using room number and surname:
- Zero friction for direct-booked guests
- Guests who booked directly with your property already provided their real contact details at reservation; they enter only their room number and surname and are never asked for an email address or survey response.
- Compliant email and consent prompt for OTA-booked guests
- When a guest booked through an Online Travel Agency (OTA) that masks their email behind a proxy address, RM-WiFi can prompt for their personal email address alongside an optional, unbundled marketing consent checkbox.
- Automated statutory identification
- Statutory laws requiring guest identification are satisfied because the room folio connects the session to verified passport or national ID records collected during check-in.
- Automated check-out expiry
- RM-WiFi queries live PMS folios in real time, keeping access active for the stay and ending Wi-Fi access at check-out after a short grace period.
NTP clock synchronisation for evidentiary records
Telecommunications compliance frameworks require connection logs to serve as admissible digital evidence in formal legal and regulatory inquiries. A log file with drifting or inaccurate timestamps is legally void.
RM-WiFi mandates strict Network Time Protocol (NTP) timekeeping across all network infrastructure:
- Stratum 1 and 2 clock sources
- Network gateways, wireless controllers, and RADIUS servers synchronise to verified Stratum 1 or Stratum 2 NTP time references.
- Forensic millisecond accuracy
- Clocks across all routing hardware maintain alignment within tight millisecond thresholds to ensure indisputable timeline correlation.
- Coordinated Universal Time (UTC)
- RADIUS accounting session timestamps (RFC 2866
Acct-Session-Time) record in UTC alongside local property offsets. - Audit trail integrity
- Timestamps survive power cycles and gateway reboots, preventing corrupt or out-of-order session records.
International privacy standards and the right to erasure
Modern data protection legislation grants guests explicit rights regarding personal data, including the right of access, rectification, and erasure.
RM-WiFi provides structured tools to execute statutory data subject rights without compromising legal log retention:
- Immediate marketing erasure
- Upon receipt of an erasure request, RM-WiFi scrubs personal contact details, marketing tags, and communication history from CRM profiles.
- Statutory retention exemptions
- Technical connection logs required under mandatory telecommunication laws remain preserved in pseudonymised format until the local statutory retention period passes.
- Automated log destruction
- Once local statutory retention periods expire, connection records are irreversibly deleted from cloud servers.
- Landlord and owner data masking
- In residential villa estates and condo developments, unit owners view occupancy calendars with all guest personal identities masked.
- Regional statutory compliance
- Specific compliance guides for Thailand Wi-Fi compliance and Indonesia Wi-Fi compliance.
Clear subscription plans, or a tailored quote for your property.
See our published monthly rates for RM-WiFi, RM-Tables, RM-CRM, RM-Desk and Resort Manager Flex on our Pricing page, or tell us how many rooms and outlets you run and which add-on modules you need for a tailored proposal.