Responsible Marketing and the Future of Hospitality

Introduction

Hospitality marketing has entered an era in which promotional creativity cannot be separated from questions of responsibility. Hotels, resorts, restaurants, cruise companies, attractions, and online travel intermediaries now collect extensive behavioural data, automate decisions, personalise prices and messages, and use immersive technologies to influence guest choice. These capabilities create value, but they also create risks involving privacy, cybersecurity, discrimination, manipulation, exclusion, cultural harm, misleading sustainability claims, and weak accountability.

Responsible hospitality marketing is therefore more than legal compliance. It is the disciplined management of marketing activities so that they create legitimate value for guests, communities, employees, owners, and the environment while preventing foreseeable harm. It requires marketers to consider not only whether a campaign increases bookings, but also how data were obtained, who may be excluded, whether claims can be verified, whether automated decisions are fair, and whether the organisation can explain and govern its actions.

The future of hospitality will be shaped by smart rooms, connected buildings, artificial intelligence, immersive media, platform ecosystems, robotics, biometric systems, and changing guest expectations. The central managerial challenge is to adopt useful innovation without allowing technology to weaken human dignity, autonomy, safety, or trust.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain the meaning and strategic importance of responsible hospitality marketing.
2. Evaluate privacy, cybersecurity, consumer-protection, and data-governance risks.
3. Identify algorithmic bias and propose controls for fairer automated marketing.
4. Design more accessible and culturally sensitive marketing practices.
5. Assess sustainability claims and distinguish credible communication from greenwashing.
6. Evaluate smart hospitality, immersive media, platform disruption, and future guest expectations.
7. Apply a governance framework to a contemporary hospitality marketing decision.

1. From Promotional Ethics to Responsible Marketing

Traditional marketing ethics often focused on advertising truthfulness, selling practices, and compliance with consumer law. Contemporary hospitality requires a broader perspective because marketing systems increasingly operate across the entire guest journey. A booking engine may rank rooms, a customer relationship management system may segment guests, a mobile application may collect location data, and an algorithm may determine which offer appears first. Marketing is consequently embedded in service design, information systems, revenue management, and operations.

Responsible marketing has four connected dimensions:

• Value creation: delivering genuine guest and stakeholder benefits.
• Harm prevention: reducing privacy, security, discrimination, deception, safety, and environmental risks.
• Fair process: ensuring that decisions are transparent, inclusive, contestable, and proportionate.
• Accountability: assigning responsibility, monitoring outcomes, and providing remedies when harm occurs.

A useful ethical test is to ask five questions before launching an initiative:

1. Is the practice lawful in every relevant jurisdiction?
2. Would a reasonable guest understand and expect it?
3. Could the practice disadvantage a vulnerable or protected group?
4. Can the organisation substantiate its claims and explain its decisions?
5. If the practice became public, would it strengthen or damage trust?

These questions do not replace legal advice or formal impact assessments. They create an initial managerial discipline for identifying issues that conventional campaign metrics may conceal.

2. Privacy and Data Governance

Hospitality organisations process identity, contact, payment, passport, loyalty, preference, location, accessibility, and sometimes biometric information. Some data are supplied directly by guests; others are inferred from browsing, transactions, device identifiers, or interactions with staff and applications. The marketing value of data does not eliminate the guest’s rights over how data are collected and used.

2.1 Core privacy principles

Across major data-protection regimes, sound practice commonly reflects the following principles:

• Purpose limitation: collect data for specified, legitimate purposes rather than undefined future use.
• Data minimisation: collect only what is reasonably necessary.
• Transparency: explain what is collected, why, with whom it is shared, and how long it is retained.
• Choice and control: provide meaningful consent or another lawful basis and make withdrawal practical.
• Accuracy: allow inaccurate personal data to be corrected.
• Security: protect data against unauthorised access, alteration, loss, and disclosure.
• Retention limitation: delete or anonymise information when it is no longer required.
• Accountability: document decisions and demonstrate compliance.

Consent is not meaningful when it is hidden in lengthy terms, bundled with an essential service, or obtained through confusing interface design. A hotel should distinguish necessary processing—such as processing a payment—from optional processing, such as personalised advertising or sharing data with unrelated partners. Preference centres should be understandable and available after booking, not only at the point of initial registration.

2.2 Data life-cycle governance

A practical governance process follows the data life cycle:

1. Collect: identify the data source, purpose, lawful basis, and sensitivity.
2. Classify: distinguish ordinary, confidential, sensitive, and highly restricted information.
3. Use: limit access and processing to approved purposes.
4. Share: assess vendors, transfers, contractual controls, and guest expectations.
5. Retain: establish retention schedules and deletion responsibilities.
6. Respond: prepare procedures for access requests, complaints, and breaches.
7. Review: test whether the data still produce sufficient value relative to risk.

Data protection impact assessments are particularly useful where processing is large-scale, automated, sensitive, or likely to affect individuals significantly. A marketing director should not assume that the information technology department alone owns privacy risk. Marketing owns the purpose and commercial logic of many data uses; procurement owns third-party controls; senior governance owns risk appetite.

2.3 Cybersecurity as a marketing responsibility

A data breach is not merely a technical incident. It damages confidence in the brand, disrupts reservations, exposes guests to fraud, and may create regulatory and contractual liability. Common hospitality vulnerabilities include exposed booking interfaces, reused passwords, insecure point-of-sale systems, excessive employee privileges, unpatched property-management systems, phishing, and poorly governed third-party applications.

Responsible marketing practice includes:

• collecting less sensitive information where possible;
• using strong authentication and role-based access;
• encrypting data in transit and at rest where appropriate;
• separating payment environments from general marketing systems;
• testing vendors before integration;
• training employees to recognise social engineering;
• maintaining incident-response and guest-notification plans; and
• conducting regular access reviews and simulated attacks.

Marketing teams should also avoid sending sensitive information through ordinary email or using guest data in demonstrations, screenshots, or artificial-intelligence prompts without authorisation.

3. Algorithmic Fairness and Accountability

Artificial intelligence and machine learning can forecast demand, recommend offers, rank search results, predict churn, generate content, and personalise service. These systems may improve relevance and efficiency, but they can reproduce historical inequalities or create new forms of discrimination.

3.1 How bias enters hospitality systems

Bias can arise through:

• Historical data: past prices or promotions may reflect unequal treatment.
• Representation: some cultural, linguistic, disability, or demographic groups may be underrepresented.
• Measurement: proxies such as device type, postcode, language, or browsing behaviour may correlate with protected characteristics.
• Label design: a system trained on complaints may learn staff reporting patterns rather than actual service quality.
• Deployment context: a model accurate in one market may perform poorly in another.
• Feedback loops: guests excluded from offers generate little data, apparently confirming their exclusion.

For example, a propensity model may identify frequent business travellers as highly profitable and repeatedly target them with upgrades, while failing to recognise the value of families who book less frequently but stay longer. A dynamic-pricing system may also produce unequal outcomes if it uses location or browsing signals that act as proxies for income or nationality.

3.2 A governance framework for automated marketing

A responsible organisation should establish an inventory of automated systems and assess each system before and after deployment. The assessment should ask:

• What decision does the system make?
• Who may be affected?
• What data and proxies does it use?
• Is the decision necessary and proportionate?
• Can a human review or override it?
• What performance differences occur across relevant groups?
• How can a guest challenge an outcome?

Fairness is not a single universal statistical condition. In some contexts, managers may compare selection rates across groups; in others, they may compare error rates, price distributions, or recommendation quality. These measures can conflict, especially where base rates differ. Therefore, fairness requires a normative decision about what equal treatment means in the particular service context, supported by legal and social analysis rather than by a single metric.

Controls include representative data, documented model purposes, human review for high-impact decisions, pre-deployment testing, ongoing monitoring, explainable reasons for material outcomes, and an appeal process. Generative AI adds risks of fabricated information, inappropriate imagery, stereotyping, copyright infringement, and disclosure of confidential prompts. Human editorial review remains essential for public-facing content.

4. Accessibility and Cultural Sensitivity

Accessibility is both an ethical obligation and a market-quality issue. Guests may experience physical, sensory, cognitive, linguistic, financial, or digital barriers. An inaccessible website, unreadable booking interface, inaccessible video, or inaccurate description of a room can prevent a guest from making an informed choice.

Responsible marketing should include:

• keyboard-accessible websites and booking paths;
• sufficient colour contrast and meaningful text alternatives;
• captions and transcripts for audiovisual content;
• plain language and clear error messages;
• compatibility with assistive technologies;
• accurate information about entrances, bathrooms, beds, transport, and emergency arrangements;
• alternative contact channels, including human assistance; and
• user testing with people who have different access needs.

Accessibility claims must describe actual service capability. A property should not advertise itself as “fully accessible” if only selected public areas meet that description.

Cultural sensitivity requires more than translating a slogan. Hospitality marketing represents people, places, rituals, food, history, and identity. Risks include exoticising communities, appropriating sacred symbols, stereotyping nationalities, using culturally inaccurate imagery, and promoting destinations without acknowledging local constraints. Marketers should involve local stakeholders, obtain permission where appropriate, use accurate names and narratives, avoid reducing communities to decorative themes, and consider whether the campaign encourages respectful visitor behaviour.

5. Consumer Protection and Trust

Hospitality offers can be difficult to compare because prices may vary by date, channel, membership status, taxes, resort fees, cancellation conditions, currency, and availability. Consumer-protection principles require that material conditions be clear before commitment. Important practices include:

• displaying the total mandatory price early;
• distinguishing optional extras from compulsory charges;
• stating cancellation, refund, and no-show conditions clearly;
• avoiding false urgency such as unsupported “only one room left” messages;
• disclosing sponsored rankings and affiliate relationships;
• moderating reviews against manipulation and fake content; and
• ensuring that loyalty-programme conditions are understandable.

Personalisation must not become manipulation. A message that exploits a guest’s anxiety, illness, financial distress, or lack of language proficiency is ethically problematic even if technically legal. Dark patterns—interfaces that make acceptance easy and refusal difficult—undermine informed choice.

Trust is cumulative. It depends on consistency between promise and experience, not only on attractive advertising. A responsible complaints process should record the issue, protect the complainant from retaliation, provide a timely response, and use recurring complaints as evidence for service improvement.

6. Sustainability Claims and Environmental Integrity

Hospitality marketing increasingly communicates claims about carbon, water, waste, local sourcing, biodiversity, and social impact. Such claims influence purchase decisions and investor perceptions, but vague language can mislead. Terms such as “green,” “eco-friendly,” “sustainable,” and “carbon neutral” require precise meaning and credible evidence.

A robust sustainability claim should specify:

1. the subject and boundary of the claim;
2. the baseline or comparison;
3. the time period;
4. the method of measurement;
5. exclusions and limitations;
6. whether the result is independently verified; and
7. what the guest should not infer from the claim.

For example, replacing single-use plastic bottles with dispensers may reduce packaging waste but does not demonstrate that the property is environmentally sustainable overall. A carbon-neutral claim may depend on reductions, renewable energy, and purchased offsets; these are not equivalent and should be disclosed separately.

Marketing and sustainability teams should align communication with recognised reporting, measurement, and assurance practices relevant to their jurisdiction and sector. Internal evidence should be retained, claims should be reviewed by competent personnel, and corrective action should follow if a claim becomes inaccurate. Greenwashing can arise through outright falsehood, selective disclosure, ambiguous language, attractive imagery that implies more than the evidence supports, or highlighting a minor improvement while concealing major impacts.

7. Smart Hospitality and Emerging Guest Expectations

Smart hospitality integrates connected rooms, sensors, mobile keys, voice interfaces, predictive maintenance, energy-management systems, robotics, and real-time service platforms. Its promise is a smoother, more personalised, and more efficient experience. Its risks include surveillance, cyberattack, system failure, digital exclusion, and the erosion of human interaction.

The principle of privacy by design requires privacy and security to be considered at the architecture stage rather than added after deployment. A smart-room project should define which sensors are necessary, whether processing can occur locally, how long data are retained, who can access them, and how guests can disable non-essential functions. A guest may welcome automatic temperature control but object to continuous audio monitoring. Convenience does not equal consent.

Future guests are likely to expect:

• seamless movement between web, mobile, voice, and in-person channels;
• transparent and fair pricing;
• rapid but reliable service recovery;
• accessible and inclusive experiences;
• responsible treatment of personal data;
• evidence-based sustainability;
• authentic local connection; and
• the ability to choose between technology-enabled and human service.

The strategic implication is not that every hotel should maximise automation. Rather, technology should be selected according to guest value, operational capability, inclusion, resilience, and ethical acceptability.

8. Immersive Media and Platform Disruption

Virtual reality, augmented reality, 360-degree tours, digital twins, spatial computing, and interactive storytelling can reduce uncertainty before booking and enrich destination interpretation. A virtual tour may help a guest assess room layout, while augmented reality may provide accessible historical information at a cultural site.

However, immersive media can exaggerate space, omit inconvenient features, produce motion discomfort, collect behavioural data, or blur the distinction between representation and reality. Marketing teams should label simulations, disclose material limitations, test accessibility, and avoid digitally altering features that would affect a reasonable purchasing decision.

Digital platforms have changed distribution by connecting properties with global demand, aggregating reviews, facilitating comparison, and introducing alternative accommodation. They also create dependence, commission pressure, ranking opacity, data asymmetry, and disputes over guest ownership. A property may receive bookings through a platform but lack direct access to the customer relationship. Platform governance should therefore form part of channel strategy.

Managers should evaluate platforms using more than volume. Relevant criteria include net contribution after commission, cancellation and fraud rates, guest-data access, ranking dependence, contractual restrictions, dispute mechanisms, and strategic resilience. A balanced portfolio may combine direct channels, selected intermediaries, partnerships, and relationship-based repeat business.

9. Governance: From Principles to Operating Practice

Responsible marketing fails when it remains a statement of values without ownership, controls, or measurement. A practical governance model has five layers:

1. Purpose and policy: define acceptable data use, claims, inclusion, automation, and partner conduct.
2. Accountability: assign executive ownership and cross-functional review involving marketing, legal, information security, operations, sustainability, and guest relations.
3. Assessment: conduct privacy, accessibility, algorithmic, cybersecurity, cultural, and environmental impact reviews according to risk.
4. Controls: use approval gates, vendor due diligence, testing, documentation, access management, content review, and incident procedures.
5. Monitoring and remedy: track outcomes, receive complaints, audit performance, correct errors, and report material incidents.

A useful governance scorecard can combine commercial and responsibility indicators. Examples include conversion and retention, complaint rates, accessibility defects, opt-out rates, data incidents, price-disparity patterns, model performance across groups, verified emissions reductions, and time to resolve guest concerns. Metrics should not reward growth while ignoring harm. Senior leaders should review trade-offs explicitly.

Illustrative Case: The Connected Coast Resort

Background

The fictional Connected Coast Resort introduced a mobile application offering mobile check-in, digital room keys, personalised dining recommendations, smart-room controls, and targeted loyalty offers. Management expected higher direct bookings and lower energy consumption.

Problem

The application requested continuous location access, microphone permission for voice control, passport information, and permission to share data with advertising partners. Guests were presented with a single “accept all” button. The recommendation engine offered premium upgrades disproportionately to guests from selected postcodes. The resort advertised “carbon-neutral stays,” although most of the claimed result came from purchased offsets and the property had not disclosed the boundary of its calculation. Several older guests and guests with visual impairments reported that the application was difficult to use.

Analysis

The initiative created four linked risks. First, data collection exceeded what was necessary for core accommodation services. Second, the upgrade model used a potentially discriminatory proxy without adequate testing. Third, the environmental claim encouraged a broader conclusion than the evidence supported. Fourth, digital-only service design excluded guests and transferred responsibility for access to the consumer.

The commercial metrics initially looked positive, but they omitted opt-out rates, accessibility failures, unequal offer exposure, and trust effects. The problem was therefore a governance failure, not simply a flawed application.

Approach and solution

The resort formed a cross-functional review group and divided permissions into necessary and optional categories. Location and microphone features became opt-in, with local processing used where feasible. A human-assisted check-in route was retained. The upgrade model was suspended, tested for disparate outcomes, and redesigned using narrower, justified variables. Guests received a plain-language explanation and an appeal route.

The resort replaced “carbon-neutral stays” with a specific claim describing measured emissions, the reporting boundary, reductions achieved, and the separate role of offsets. Accessibility testing was conducted with representative users, and the booking path was redesigned for keyboard navigation, screen readers, captions, and clear language. Advertising partners were required to meet contractual security and privacy standards.

Outcome

The resort experienced a short-term reduction in highly targeted offers but improved direct-booking trust scores, reduced complaints, increased completion of accessible booking journeys, and strengthened staff confidence in explaining the technology. The case demonstrates that responsible marketing may involve refusing attractive but unjustifiable data uses and treating inclusion as a design requirement rather than a remedial expense.

Learning points

• Convenience must be balanced against necessity and autonomy.
• Automated personalisation requires testing for unequal outcomes.
• Sustainability claims must match measured evidence.
• Human alternatives are essential when digital systems create barriers.
• Governance should occur before launch and continue throughout the system life cycle.

Challenges and Limitations

Responsible marketing involves genuine trade-offs. More data may improve personalisation but increase exposure and surveillance. Strong consent requirements may reduce apparent conversion. Human review may increase cost and slow automation. A platform may provide essential market access while weakening direct relationships. Sustainability measurement may be incomplete because supply-chain data are difficult to obtain.

No framework eliminates judgement. Privacy law differs across countries, fairness definitions may conflict, and accessibility needs vary by user. Audits can become symbolic if managers test documentation rather than real outcomes. Ethical committees can also become bottlenecks if they lack expertise or decision authority. Effective governance therefore requires proportionality: low-risk activities should not face the same process as biometric identification or high-impact automated decisions, but speed must never be used to excuse avoidable harm.

Best-Practice Principles for Hospitality Marketers

1. Begin with guest value and foreseeable harm, not with the available technology.
2. Collect the minimum data necessary and make optional uses genuinely optional.
3. Treat cybersecurity as a brand and guest-trust responsibility.
4. Test automated systems for disparate effects and provide human review.
5. Design communications and booking journeys for accessibility from the outset.
6. Represent cultures accurately and involve affected communities.
7. Make total prices, conditions, rankings, sponsorships, and limitations clear.
8. Substantiate sustainability claims with defined boundaries and reliable evidence.
9. Preserve human service alternatives and operational resilience.
10. Measure responsibility outcomes alongside revenue and conversion.
11. Give guests practical routes to question, correct, withdraw, or complain.
12. Assign named owners for governance and review systems after deployment.

Chapter Summary

Responsible marketing is the integration of commercial value, harm prevention, fairness, inclusion, transparency, and accountability into hospitality marketing decisions. Privacy requires purpose limitation, data minimisation, meaningful choice, security, retention control, and documented accountability. Cybersecurity protects not only systems but also guest trust and organisational continuity.

Algorithmic marketing can improve relevance but may reproduce historical and proxy-based discrimination. Responsible deployment requires impact assessment, representative data, monitoring, explanation, human review, and appeal. Accessibility and cultural sensitivity ensure that marketing does not exclude guests or misrepresent communities. Consumer protection requires clear prices, conditions, rankings, reviews, and promotional claims. Sustainability communication must be specific, bounded, evidence-based, and honest about reductions, offsets, and limitations.

Smart hospitality, immersive media, and platforms create opportunities for convenience, efficiency, storytelling, and market reach. They also introduce surveillance, cyber, exclusion, dependency, and authenticity risks. Future guest expectations will combine digital seamlessness with privacy, accessibility, meaningful choice, reliable human support, and credible sustainability. Governance converts these principles into policies, assessments, controls, monitoring, and remedies. The strategic lesson is that responsibility is not opposed to innovation; it is a condition for trustworthy and durable innovation.

Key Terms

Responsible marketing: Marketing that creates stakeholder value while preventing foreseeable harm and supporting accountability.

Purpose limitation: Restricting personal-data use to specified and legitimate purposes.

Data minimisation: Collecting and processing only data reasonably necessary for an identified purpose.

Privacy by design: Embedding privacy and data protection into systems and services from the planning stage.

Cybersecurity: Protection of information systems and data against unauthorised access, disruption, alteration, or loss.

Algorithmic bias: Systematic and unjustified disadvantage produced or reproduced by an automated system.

Proxy variable: A variable that indirectly represents another characteristic, potentially including a protected attribute.

Human-in-the-loop: A design in which a person reviews, supervises, or can override an automated decision.

Accessibility: Design that enables people with diverse abilities to obtain information and use services.

Cultural sensitivity: Respectful, accurate, and context-aware representation of cultures and communities.

Consumer protection: Legal and ethical safeguards against deception, unfairness, hidden conditions, and unsafe practices.

Dark pattern: An interface design that steers users toward choices they may not freely or knowingly prefer.

Greenwashing: Misleading communication that exaggerates or falsely represents environmental performance.

Carbon offset: A purchased or transferred reduction or removal used to compensate for emissions elsewhere.

Smart hospitality: Hospitality enabled by connected devices, sensors, software, automation, and data-driven services.

Immersive media: Technologies such as virtual, augmented, or mixed reality that create interactive mediated experiences.

Platform disruption: Market change caused by digital intermediaries that alter distribution, relationships, and competitive power.

Data governance: Policies, roles, processes, and controls governing the quality, use, security, and accountability of data.

Impact assessment: A structured evaluation of likely effects, risks, affected groups, and proposed controls.

Explainability: The ability to communicate how an automated system produces or supports a decision.

Review Questions

Short Answer Questions

1. What is meant by responsible hospitality marketing?
2. State four principles of sound privacy governance.
3. Identify three ways algorithmic bias can enter a hospitality marketing system.
4. Why can sustainability claims become misleading even when a property has achieved an environmental improvement?
5. What is the purpose of retaining a human service alternative in smart hospitality?

Long Answer Questions

1. Explain how privacy, cybersecurity, and consumer trust are connected in hospitality marketing.
2. Critically evaluate the benefits and risks of algorithmic personalisation in hotel marketing.
3. Discuss how accessibility and cultural sensitivity should influence destination and property communications.
4. Examine the governance requirements for credible sustainability marketing.
5. Evaluate how digital platforms have changed hospitality distribution and customer relationships.

Analytical / Application Questions

1. A hotel wants to use guests’ continuous location data to send restaurant offers. Apply purpose limitation, data minimisation, consent, and security principles to recommend a responsible design.
2. A revenue system offers higher prices to users browsing from selected locations. Design an investigation to determine whether the practice is commercially justified, discriminatory, or both.
3. You are asked to approve the claim “the world’s most sustainable urban hotel.” Identify the evidence, boundaries, disclosures, and governance approvals required before publication.

Multiple Choice Questions with Answers

Question 1

Which principle requires an organisation to collect only the personal data reasonably necessary for an identified purpose?

A. Data minimisation

B. Purpose expansion

C. Algorithmic ranking

D. Platform neutrality

Correct Answer: A. Data minimisation

Question 2

Which practice best supports fair automated marketing?

A. Hiding the model from all review

B. Using postcode without testing its effects

C. Monitoring outcomes across relevant groups and providing human review

D. Removing all customer data from the system

Correct Answer: C. Monitoring outcomes across relevant groups and providing human review

Question 3

Why is a continuous microphone request in a hotel application potentially problematic?

A. It always reduces room capacity

B. It may collect information beyond what is necessary for the service

C. It prevents sustainability reporting

D. It guarantees inaccurate prices

Correct Answer: B. It may collect information beyond what is necessary for the service

Question 4

Which statement is most likely to be a credible sustainability claim?

A. Our hotel is completely green

B. The planet’s best resort

C. A specific, measured reduction within a stated boundary and period

D. Luxury with zero environmental impact

Correct Answer: C. A specific, measured reduction within a stated boundary and period

Question 5

What is a dark pattern?

A. A cybersecurity encryption method

B. An interface designed to steer users toward choices they may not freely prefer

C. A culturally accurate visual identity

D. A method of measuring carbon emissions

Correct Answer: B. An interface designed to steer users toward choices they may not freely prefer

Question 6

Which measure most directly improves accessibility in digital booking?

A. Removing human assistance

B. Using captions, keyboard access, and meaningful text alternatives

C. Increasing animation speed

D. Restricting bookings to mobile devices

Correct Answer: B. Using captions, keyboard access, and meaningful text alternatives

Question 7

A platform intermediary’s ranking algorithm is opaque. Which managerial response is most appropriate?

A. Depend on the platform without monitoring

B. Evaluate channel dependence, net contribution, contractual terms, and data access

C. Stop measuring cancellations

D. Give the platform exclusive control of all guest relationships

Correct Answer: B. Evaluate channel dependence, net contribution, contractual terms, and data access

Question 8

What is the main purpose of an impact assessment before deploying a high-risk marketing technology?

A. To guarantee higher conversion

B. To identify affected groups, risks, and suitable controls

C. To eliminate the need for legal review

D. To replace employee training

Correct Answer: B. To identify affected groups, risks, and suitable controls

Question 9

Which example best illustrates a proxy variable?

A. A room number used only to locate a reservation

B. A postcode that indirectly correlates with income or nationality

C. A published cancellation deadline

D. A verified accessibility feature

Correct Answer: B. A postcode that indirectly correlates with income or nationality

Question 10

Why should smart hospitality retain non-digital service options?

A. All guests prefer slower service

B. Technology has no operational value

C. Digital-only design may exclude guests and fail during outages

D. It prevents all cybersecurity incidents

Correct Answer: C. Digital-only design may exclude guests and fail during outages