The CIN and the EU Short-Term Rental Regulation: What Is Actually Being Checked from 2026

You have the CIN. It is in the drawer, with the printout of the receipt from the national database. But then on Booking the listing is in the company’s name, on Airbnb it is in yours, the street number is written two different ways, and on one of the two portals the code was never entered at all because “they asked for it in a field nobody could make sense of”. As long as nobody was checking, it was harmless untidiness. From 2026 it is not, because what does the checking is not an inspector ringing the doorbell: it is an automated comparison between two databases.

This guide explains how the two overlapping layers of rules work today — Italy’s CIN and the European short-term rental Regulation — what actually changes for anyone letting a property, and where things most often break. It contains no penalty amounts: at the end we explain why, and where to find them kept up to date.

The picture in two lines

There are two overlapping sets of rules, and they are often confused.

• The CIN is Italian. The Codice Identificativo Nazionale — national identification code — comes from article 13-ter of decree-law 145/2023 (as converted by law 191/2023): a code assigned by the Ministry of Tourism to every unit used for short-term or tourist letting and to every accommodation business. It has to be requested, displayed and published in your listings.
• Regulation (EU) 2024/1028 is European and applies from 20 May 2026. It does not create a new code: it sets common rules on how member states’ registration systems must work and on what data the platforms must transmit to the authorities.

The CIN: who needs one and where it goes

It applies to anyone carrying on a hospitality activity: short-term lets, holiday homes, rooms to let, B&Bs, farm stays, hotels. You apply for it through the Ministry of Tourism’s BDSR portal — the Banca Dati delle Strutture Ricettive, the national accommodation database — using the digital identity (SPID or electronic ID card) of the owner or legal representative.

The step that blocks the most applications comes earlier: in many regions the CIN will not be generated unless the property already has its regional code. If the national database cannot find the property, the portal is not malfunctioning — the regional registration is missing. That is where you start.

The three places the code has to appear

1. In every online listing, on any channel: OTA portals, your own website, classified listings, social media if you use it to sell.
2. Outside the property, where the rules require it.
3. In the national database, with the unit’s details correct and up to date — and this is the reference everything else gets compared against.

If you run several channels, entering the code by hand on each one is the quickest way to forget one. Anyone working through a channel manager sets it once on the property record and it propagates to every connected listing: this is exactly the kind of repetitive compliance task that tool exists for.

What changed on 20 May 2026

From spring 2026 the European Regulation is fully applicable. Three mechanisms, in summary.

1. The platforms verify the code, they no longer just collect it

Previously the registration number was a text field: you typed something and the listing went live. Now the platforms have to check that the code exists and is valid by comparing it against the public registers, identify irregular listings and remove them at the authorities’ request.

In plain terms: a wrong, expired or mismatched code is no longer inert data in a form. It is a discrepancy that surfaces by itself.

2. Activity data reaches the authorities periodically

The platforms transmit information about the lettings to the public authorities: the number of nights booked, data relating to guests, the address and the identifier of the accommodation. Not on a case-by-case request — periodically and in a structured form.

3. A single digital entry point

The flow does not go through bilateral arrangements between each portal and each municipality: it goes through one national single digital entry point. It is the least visible part and the most consequential, because it is what makes comparison possible at scale rather than on a sample basis.

The practical consequence: consistency is no longer a detail

This is the part worth the read. Until yesterday your information lived in separate compartments: the national database, the listings on the portals, the police guest-reporting portal, the tourist tax return, the accounts. Nobody compared them, except in a specific investigation.

Now the pipes connecting them exist. Which means a difference between two systems does not stay hidden: it stands out as an anomaly without anyone having gone looking for it.

There are four alignments to check:

• Code → unit. The CIN published in a listing has to correspond to the unit that listing actually sells. With two apartments in the same building, swapping them is a three-second copy-and-paste mistake.
• Address → national database. Street, number, flat and postcode written the way the database recorded them, not the way you usually write them.
• Nights sold → nights declared. The nights the portal reports and the nights appearing in your tourist tax return should be the same number.
• Guests → police reporting. Reporting your guests to the provincial police headquarters remains a separate obligation, with its own deadlines. The European data flow does not replace it.

Where things break, in order of frequency

From what we see on clients’ sites and accounts, the mistakes are almost always the same five — and not one of them is a mistake in reading the law. They are management problems.

1. The code is on two channels out of four. Entered on Booking and Airbnb the day it was issued, never added to the property’s own website or to the secondary portal opened the year before. The own website is the one most often forgotten, because “it’s ours”.

2. An old listing is still live. A page on a minor portal, opened by a former colleague and never closed, with no code and a price from three seasons ago. It is still yours in the eyes of whoever is comparing the data.

3. The address is written three different ways. “Via Roma 12”, “Via Roma, 12/A”, “V. Roma 12 int. 3”. To a person they are the same place. To an automated comparison they are three addresses.

4. The registered holder is not the one taking the money. Property registered in an individual’s name, listings in the company’s name (or the other way round). It is the most tedious discrepancy to fix, because it means touching the registration rather than the listing.

5. The regional code is missing and nobody knows. The CIN application failed months earlier, the error message was taken for a portal glitch, and work has continued without a code in the belief that one was requested.

What to check today, in half an hour

1. List every active channel. All of them: OTAs, your own site, local portals, pages on consortium websites, classifieds. Search the property’s name on Google to find the ones you have forgotten.
2. Verify the code on each, character by character, against the database receipt and not against memory.
3. Compare the address on every listing with the one registered in the national database, in the same form.
4. Close the listings you no longer use. Not “pause” them: close them.
5. Check the ownership: whoever is the registered holder in the database and whoever appears as host on the portals have to be the same person or entity.
6. Reconcile one sample month: nights sold on the portals against nights declared for the tourist tax. If they do not match, the problem predates 2026 and needs clearing up now.

Anyone also selling directly from their own website has an advantage here: the more weight the direct channel carries, the less you depend on the accuracy of listings you do not control.

Why there are no amounts in this article

You will have read precise figures elsewhere. We went looking for them too: the trade sources agree neither on the amounts nor on some of the dates they take effect, and on top of that part of the penalties and requirements are regional, so a figure that holds in Campania may not hold in Lombardy. Publishing a wrong number, in an article somebody will use to make a decision, is worse than not publishing one.

The questions we are asked most

I run a hotel, not a short-term let: does this concern me?

The CIN applies to hotels as well, so yes for that part. The European Regulation is designed for short-term rentals intermediated by platforms: it concerns you to the extent that you sell through those channels.

If I only let through one platform, is there less to do?

The obligations are the same, but you have one point of exposure fewer — and one concentration risk more: if that listing is suspended over an inconsistent piece of data, the business stops altogether.

The platform transmits the data: do I still have to report my guests?

Yes. They are two distinct flows, with different legal bases and different recipients. Reporting guests to the police remains an obligation that falls on you.

Should I remove the CIN from my listings for privacy reasons?

No, quite the opposite: publishing it in the listings is part of the obligation. It identifies the property, it is not personal data to be protected.

Does anything change if I manage properties on behalf of others?

The amount of work changes, not the substance: every unit has its own code and its own data, and consistency has to be checked for each. This is the case where channel automation stops being convenient and becomes necessary.

In short

From 20 May 2026 the CIN is no longer a piece of paperwork to file away: it is the key by which listings, registers and activity data get compared. The work to be done is not understanding a complicated law — it is tidying up information you probably already have, scattered across different channels, written in different ways.

Half an hour of checking today is worth more than any amount of reading about penalties. And, as almost always in these cases, the tidying is worth doing anyway: a customer who finds the same address and the same details on every channel trusts you more, regardless of who else is comparing them.

This article is for information only and does not constitute legal or tax advice. For your own situation, check the official sources listed above and consult a qualified professional.