Theft in a Hotel Room: The Civil, Criminal and Administrative Liability of the Operator

Theft suffered by a guest inside their own room is one of the most recurring disputes in tourism law. The instinctive reaction of many operators — invoking the notices posted at reception stating that "Management is not liable for items left unattended" — actually carries no exonerating value: Italian law builds around the hotel contract a system of liability that falls on the operator in an almost automatic way, unless proven otherwise. The framework, however, changes significantly depending on the type of accommodation facility involved, and changes even more radically once one moves away from the hotel contract properly so called into the increasingly common field of tourist rental of apartments (the so-called "holiday homes" or "short-term rentals").

The Civil Law Perimeter: Articles 1783-1786 of the Italian Civil Code

Under settled case law, the hotel contract is not an autonomous contract type but a mixed transaction, in which the lease of the accommodation is combined with the provision of services (cleaning, reception, possibly meals) and an ancillary custody obligation. It is precisely this last element that grounds, at Articles 1783 et seq. of the Civil Code, a peculiar liability regime — commonly referred to as liability "ex recepto" — which does not depend on an express custody agreement and arises simply from the fact that the guest's belongings have been brought into the facility.

Items "brought" into the hotel (Art. 1783 c.c.). For everything the guest brings into the hotel without formally handing it over for safekeeping — luggage, personal belongings, items left in the room — the hotelier is liable for deterioration, destruction or theft under a form of strict or quasi-strict liability: there is no need to prove fault, it being sufficient to show that the item was on the premises during the period the guest had use of the accommodation. Liability is nonetheless capped, subject to the exceptions discussed below, at an amount equal to one hundred times the daily room rate.

Items "handed over" (Art. 1784 c.c.). If the guest explicitly entrusts valuables to the hotelier — typically via a safe or safety deposit box — liability becomes unlimited. The same applies where the hotelier wrongfully refuses to accept for safekeeping items it is obliged to accept: refusal is only lawful for dangerous items, items of excessive value, or items too bulky to store.

Grounds for exemption (Art. 1785 c.c.). The hotelier can be released from liability only by proving that the loss was due to the act of the guest or their companions, to force majeure, or to the nature of the item itself. Case law treats as force majeure, for instance, a theft carried out by drugging guests without their knowledge, while it excludes that the mere choice not to deposit valuables in the safe amounts to an "act of the guest": that omission affects, at most, the amount of compensation (triggering the cap under Art. 1783 rather than unlimited liability), not the existence of liability itself.

Fault of the hotelier (Art. 1785-bis c.c.). When the guest manages to prove that the theft was due to organizational fault on the part of the facility — an unattended cloakroom in a high-traffic area, a malfunctioning electronic key system, security staffing inadequate to the actual risks — the cap of one hundred times the daily rate no longer applies and liability reverts to being unlimited. In these cases the burden of proof shifts to the guest, who must demonstrate the causal link between the facility's negligent conduct and the theft suffered; once the theft and the value of the item have been proven, however, a presumption of liability operates in the guest's favor, and the operator must provide exculpatory proof.

Finally, Art. 1786 c.c. should be noted, which extends the discipline — with the necessary adaptations — to "establishments assimilated to hotels," as well as the guest's obligation, often overlooked, to report the theft to the facility without delay, on pain of forfeiting the right to compensation.

Not All Facilities Are Equal: The Criterion of Hotel-Like Organization

The regime just described applies in full to hotels properly so called and, by virtue of Art. 1786 c.c., to "assimilated" facilities: guesthouses (pensioni), room-letting businesses (affittacamere) organized with hotel-type services, residences with reception and daily cleaning, hostels, and university residences governed by a hospitality relationship analogous to that of a hotel. The selective criterion developed by case law is not nominal but substantive: what matters is the presence of a business organization that provides, alongside accommodation, reception, surveillance and custody services comparable to those of a hotel.

This criterion produces interesting practical consequences in borderline sectors. In agritourism facilities, for example, case law distinguishes between rooms managed with substantially hotel-like criteria — to which the obligations under Arts. 1783-1786 c.c. apply — and independent apartments located in separate buildings, without continuous staff surveillance and with cleaning left to the guests themselves: here the assimilation to a hotel weakens, and with it the owner's liability. The same qualification-dependent logic applies to bed & breakfasts: a B&B offering reception and daily cleaning services tends to be treated as a hotel-like facility in the broad sense; a simple letting of rooms without any ancillary service, by contrast, moves closer to the ordinary lease regime.

Tourist Rental of Apartments: A Different Regime

This is where the most frequent misunderstanding arises among owners who rent out holiday homes through platforms such as Airbnb or Booking.com. The tourist rental of an entire apartment — governed by Art. 1, paragraph 2, letter c) of Law 431/1998 and, for short-term lettings, by Art. 4 of Decree-Law 50/2017 — is not a hotel contract, but a lease in the technical sense. It follows that, as a matter of principle, Arts. 1783-1786 c.c. do not apply: the landlord does not assume the position of custodian of the guest's belongings, because the very organizational-business element (reception, continuous surveillance, in-room services) that justifies the custody obligation in a hotel contract is absent.

This does not mean the owner is exempt from all liability. If the theft is made possible by a defect in the property attributable to the landlord's breach of contract — a lock that does not work despite having been reported, an access system manifestly inadequate compared to what was advertised in the listing — contractual liability may arise under Art. 1218 c.c. for breach of the obligation to hand over the property in suitable condition, or tortious liability under Art. 2043 c.c. The evidentiary regime, however, is the opposite of the hotel one: here it is the injured guest who must prove the landlord's breach or fault and the causal link with the theft suffered, without being able to rely on the presumption of liability that assists the hotel guest.

The distinction becomes blurrier when the manager of the tourist rental in fact offers services typical of hotel hospitality — assisted check-in with on-site staff, daily cleaning, concierge services, management of an in-room safe. In these cases, part of the legal doctrine and lower-court case law tends to reclassify the relationship as an atypical contract assimilable to a hotel contract, bringing back into play, at least by analogy, the logic of Arts. 1783 ff. c.c. This is an area where the classification must be assessed case by case, looking at the substance of the services provided rather than the label used in the listing.

Finally, a mention is owed to the new National Identification Code (Codice Identificativo Nazionale, CIN), mandatory since 1 January 2025 for all accommodation facilities and for properties intended for tourist or short-term rental. The CIN is a traceability and market-transparency tool, not something that in itself increases or reduces civil liability for theft suffered by a guest; its absence, however, exposes the landlord to autonomous administrative sanctions and may have indirect repercussions — for example on the lawfulness of the activity and on the coverage of any related insurance policies.

Criminal Liability Profiles

On the criminal side, two situations must be clearly distinguished. Theft committed by an outside third party who enters the facility is not, in itself, attributable to the operator: criminal liability is personal and falls on the actual perpetrator, save for cases of complicity (for instance, if an employee had knowingly facilitated the thief's access). The situation is different — and far from uncommon in practice — where the theft is committed by staff internal to the facility: here the ordinary theft offence applies (Art. 624 of the Criminal Code), often aggravated by the abuse of the working or hospitality relationship the employee has with the victim. On the civil side, in this scenario the liability of the facility's owner becomes even more severe: as employer, the owner is vicariously liable for the conduct of employees and auxiliaries under Art. 2049 c.c., and the fault of staff triggers, as noted above, unlimited liability under Art. 1785-bis c.c., without any possibility of invoking the cap of one hundred times the daily rate.

It should finally be noted that the mere inadequacy of security measures (absence of video surveillance, malfunctioning safes, insufficiently trained staff) generally has bearing only on civil liability and does not automatically constitute a criminal offence on the part of the operator, except in particular cases involving the violation of specific statutory security obligations.

Administrative Liability Profiles

Alongside the compensation-related profiles, the operator of an accommodation facility — and, increasingly, anyone operating in the tourist rental market — is subject to a number of obligations whose violation constitutes autonomous administrative offences, distinct from liability for the theft itself, but not without practical relevance for anyone involved in a dispute:

• the reporting of guests' personal details to the public security authority, required under Art. 109 of the Consolidated Public Security Act (T.U.L.P.S.), whose omission triggers sanctions independent of whether a theft occurs, but whose proper record-keeping is often decisive, in the course of an investigation, in reconstructing who had access to the facility at the time of the offence;

• the authorization required to operate an accommodation business (the SCIA filed with the competent SUAP — the local one-stop business desk), the absence of which does not in itself exclude civil liability for the theft, but may affect the lawfulness of the activity itself and any related insurance coverage;

• the obligations connected to the CIN and registration in the national Accommodation Facilities Database (BDSR), whose violation entails monetary sanctions and, in more serious cases, removal of listings from platforms, without however directly affecting the liability regime toward the guest who was robbed.

Practical Takeaways

For operators of accommodation facilities, the practical lesson is twofold: on one hand, disclaimer notices posted in rooms have no exonerating effect and may, if anything, be a symptom of a negligent approach to security; on the other, taking out adequate civil liability insurance, installing safes that actually work, and training staff on custody obligations remain the most effective tools for containing exposure to compensation claims. For those managing tourist rentals of apartments, awareness of operating outside the perimeter of Arts. 1783 ff. c.c. is no safe harbour: if the offering is enriched with typically hotel-like services, the classification of the relationship — and with it the liability regime — can change, with significant consequences in the event of litigation.

For guests, finally, it remains essential not to rely solely on notices posted at the facility: reporting the theft promptly, keeping proof of the value of the items stolen, and checking, before the stay, whether one is dealing with an accommodation facility properly so called or a simple lease, are precautions that can make a real difference in a subsequent claim for compensation.