Short-Term Rental Regulations

    Understanding Short-Term Rental Regulations in Italy

    12 minutes
    Understanding Short-Term Rental Regulations in Italy
    Jason Crabb

    Author

    Jason Crabb

    CMO

    Jason Crabb is the Co-Founder and CMO of Keycafe, a global leader in key management systems and electronic key lockers. A named patent holder in physical key management, he has spent 13+ years helping property managers, hospitality operators, auto dealerships, and fleet teams modernize how they secure and track keys.

    Category

    Short-Term Rental Regulations

    Published
    Last Reviewed

    Italy short-term rentals: CIN (National ID Code) on listings/premises. Mandatory safety: gas/CO detectors, fire extinguishers. Report guests to police via Alloggiati Web. Over four properties needs SCIA.

    Last reviewed: 27 July 2026. Italy rebuilt its short-term rental framework between 2024 and 2026. If you are working from a guide written before 2025, the central requirement described here did not exist yet.

    The short version

    • A short let in Italy means under 30 days. That threshold governs almost everything else.
    • You need a CIN, the national identification code. It goes in every listing and on the property. Fines for operating without one run from €800 to €8,000.
    • Every tourist rental must have working gas and carbon monoxide detectors and portable fire extinguishers. This applies whether or not you operate as a business. Fines from €600 to €6,000.
    • You must report every guest to the police within 24 hours, or within 6 hours for stays under 24 hours, through the Alloggiati Web portal. Failure is a criminal matter, not an administrative one.
    • Regional codes still exist. Once you hold a CIN you advertise with the CIN, but you usually still need to be registered in your region's database.
    • More than four properties makes you a business. SCIA filing required, with fines from €2,000 to €10,000 for skipping it.
    • Key boxes are being removed from public property in Rome, Florence and Milan. Self check-in remains legal; the cheap box on the railing does not.
    • Tax is a flat-rate option: 21% on one property you nominate, 26% on the others, with platforms withholding 21% at source.

    What counts as a short let

    Italian law works from a 30-day line.

    Short leases (locazioni brevi) are defined by Article 4 of Decree-Law 50/2017, converted by Law 96/2017, as residential leases of less than 30 days.

    Above 30 days you leave the short-let regime. The contract must be registered with the Revenue Agency, the tax treatment differs, and the guest reporting obligation works differently.

    The national framework distinguishes between:

    • Non-entrepreneurial letting, where you rent out property without running it as a business
    • Entrepreneurial letting, which requires a SCIA filing and brings additional obligations
    • Accommodation facilities (strutture ricettive), hotel and non-hotel, defined by regional law

    The important thing to grasp is that the CIN and the safety requirements apply across all of these. They are not business-only obligations.

    The CIN: Italy's national identification code

    This is the central change and the thing most older guides do not mention at all.

    Article 13-ter of Decree-Law 145/2023, converted by Law No. 191 of 15 December 2023, created the Codice Identificativo Nazionale (CIN), a unique code identifying every accommodation property in Italy. Its stated purpose is to counter irregular hospitality.

    The mechanics were set by a Ministry of Tourism decree (Prot. 16726 of 6 June 2024), which defined how regional databases exchange data with the national database, the Banca Dati delle Strutture Ricettive (BDSR).

    The notice confirming that the BDSR was operational appeared in the Gazzetta Ufficiale on 3 September 2024, which set the rules running from 2 November 2024. The Ministry then extended the compliance deadline to 1 January 2025, with sanctions applicable from 2 January 2025.

    Who needs one

    • Operators of hotel and non-hotel accommodation facilities as defined by regional law
    • Landlords of residential units let for tourist purposes
    • Landlords of residential units let under the short-lease regime of Article 4 of DL 50/2017

    In other words, essentially everyone letting residential property short-term in Italy.

    What you do with it

    You obtain the CIN through the Ministry of Tourism's BDSR portal, and to register you must already have satisfied the relevant administrative obligations for your property.

    The CIN must then appear:

    • In every advertisement and listing, on every platform, including foreign ones
    • At the property itself, displayed externally

    The CIN and regional codes

    Italy had regional identification codes (CIR) before the CIN, and this causes confusion.

    The practical position: you generally still need to be registered in your region's tourism database, and the regional code continues to function as the data interchange reference between regional and national systems. But once you hold the CIN, the CIN is what goes in your advertising, replacing the regional code for that purpose.

    Regions vary in how they have implemented this, so check your own region's tourism office. Lombardy uses Ross1000; other regions have their own platforms.

    Sources: Ministero del Turismo, BDSR frequently asked questions (Italian). See also the regional guidance published by Regione Lombardia on the CIN (PDF, Italian) and by the Città Metropolitana di Bologna (Italian).

    Mandatory safety equipment

    This obligation is widely missed and it is not optional for small operators.

    Under Article 13-ter, paragraph 7, all residential units let for tourist purposes, including short lets, managed in any form, entrepreneurial or not, must be equipped with:

    • Working detectors for combustible gas and carbon monoxide
    • Portable fire extinguishers meeting legal standards

    Properties operated in entrepreneurial form must additionally meet installation safety requirements set by national and regional rules.

    Read that again if you are a small non-professional host: "in any form, entrepreneurial or not" means you.

    Penalty: €600 to €6,000.

    Reporting your guests to the police

    This obligation predates the CIN by decades and carries the most serious consequences.

    Article 109 of the TULPS (the consolidated public security law, Royal Decree 773/1931) requires accommodation operators to report the identities of guests to the local Questura. Article 19-bis of Decree-Law 113/2018, converted by Law 132/2018 and in force from 4 December 2018, extended that obligation explicitly to landlords and sublandlords letting property for under 30 days.

    Reporting is done exclusively through Alloggiati Web, the State Police portal, using credentials issued by the Questura for the province where the property is located.

    The deadlines:

    • Within 24 hours of the guest's arrival
    • Within 6 hours where the stay does not exceed 24 hours

    Practical points:

    • The clock runs from physical check-in, not from booking
    • All guests must be reported, including minors
    • The portal accepts submissions around the clock; weekends and holidays do not extend the deadline
    • Each arrival generates a fresh obligation
    • Property managers and agencies can submit on the owner's behalf, but need written authorisation and their own credentials

    Sanctions for omitted or late reporting are criminal in nature, arising under Articles 109 and 17 of the TULPS. This is the obligation to get right first.

    Sources: Polizia di Stato, Alloggiati Web service information and guidance on the obligation and checks (Italian). The portal itself is at alloggiatiweb.poliziadistato.it.

    When you become a business

    Two thresholds matter.

    SCIA. From 2 November 2024, tourist letting conducted in entrepreneurial form must be preceded by a SCIA, the certified notification of commencement of activity, filed with the Comune. Letting more than four properties to tourists is treated as entrepreneurial activity requiring SCIA. Penalty for skipping it: €2,000 to €10,000.

    VAT and business registration. Managing more than four units on a continuous basis triggers the obligation to open a VAT position (partita IVA) and operate as a business, with the accounting and compliance that follows.

    If you are near either threshold, get Italian accounting advice before you cross it rather than after.

    Key boxes and self check-in: what is actually banned

    This is the most misreported area in Italy right now, so here is the precise position.

    Self check-in is legal. A November 2024 Interior Ministry circular had argued that key boxes made guest identification impossible and pushed towards in-person identification. On 27 May 2025, the Regional Administrative Court of Lazio (TAR Lazio) struck that directive down. What survives is the underlying obligation to identify your guests and report them through Alloggiati Web, which the court accepted can be done remotely and digitally provided it genuinely happens.

    Key boxes on public property are being removed. Separately, and on entirely different legal grounds, several cities have enforced urban decorum rules against the physical devices:

    • Rome began removing key boxes from railings, gates, drainpipes, poles and façades in January 2025, initially in Monti, with fines around €400 per device and in some cases directed at the building administrator
    • Florence acted on similar grounds
    • Milan introduced its own prohibition on key boxes on public land from January 2026, with fines in the range of €100 to €400 plus removal costs

    What this means in practice: a device fixed to public property, street furniture or a protected façade is exposed. A device inside a private entrance hall, an internal courtyard, or a commercial space you control is not on public land.

    Two things to check before installing anything: your Comune's current rules on where devices may be placed, and any heritage constraints on your building's exterior. Historic-centre façades in Italian cities frequently carry protections through the Soprintendenza that prohibit drilling.

    Rules here have changed repeatedly and continue to differ city by city. Treat your own Comune as the authority.

    Tax

    The flat-rate option (cedolare secca)

    Income from short lets can be taxed under a flat-rate regime instead of ordinary income tax:

    • 21% on one property you nominate
    • 26% on additional properties

    The structure changed under the 2024 Budget Law, which is why older guides state a flat 21%.

    Platform withholding

    Airbnb, Booking.com and other platforms operating in Italy apply a 21% withholding at source on payments to Italian landlords. This is creditable against the tax you ultimately owe, so it is a cash-flow matter rather than an extra tax. Platforms also transmit data to the Revenue Agency automatically.

    That automatic data flow is worth pausing on. Italian tax authorities now cross-reference platform data, Alloggiati Web records and the BDSR. Reporting from mid-2026 indicates the Revenue Agency is treating Alloggiati Web submissions as a tax information source, not just a public security one. Consistency across your filings matters more than it used to.

    Tourist tax (tassa di soggiorno)

    Set by each Comune, charged per person per night, collected by you and remitted locally. Rates, exemptions, night caps and receipt requirements all vary by municipality. Milan, for instance, applies it for a maximum of 14 consecutive nights in the same property, with receipts to be retained.

    Check your own Comune's regulation. There is no national rate.

    Other filings

    Regional tourist-flow statistics (Ross1000 in Lombardy, equivalents elsewhere) and contract registration for lets over 30 days are separate obligations.

    Italian short-let taxation is genuinely intricate and interacts with residency, property count and business status. Engage an Italian commercialista.

    Penalties, collected

    BreachPenalty
    No CIN€800 to €8,000
    Missing safety devices€600 to €6,000
    More than four properties without SCIA€2,000 to €10,000
    Omitted or late guest reportingCriminal, under Articles 109 and 17 TULPS
    Key box on public propertyMunicipal fines, roughly €100 to €400 plus removal, varying by city

    Amounts are periodically revised. Confirm current figures with the relevant authority.

    A practical checklist

    1. Confirm whether your letting is entrepreneurial or not, and whether you are near the four-property line
    2. Register in your regional tourism database
    3. Obtain your CIN through the BDSR portal
    4. Display the CIN in every listing and at the property
    5. Install gas and carbon monoxide detectors and portable fire extinguishers
    6. Obtain Alloggiati Web credentials from your provincial Questura
    7. Set up a process that reliably reports every guest within 24 hours, or 6 hours for short stays
    8. File a SCIA with your Comune if operating entrepreneurially
    9. Check your Comune's rules on key boxes and device placement before installing anything
    10. Confirm your municipal tourist tax rate, caps and receipt requirements
    11. Choose which property carries the 21% rate and confirm the treatment of the rest
    12. Check heritage constraints before attaching anything to a façade

    Verified official sources

    National

    Regional and local guidance on the CIN

    Named, not linked

    Cited above without a verified permalink. Search the Gazzetta Ufficiale or Normattiva by name and number.

    • Decree-Law 145/2023, Article 13-ter, converted by Law No. 191 of 15 December 2023
    • Ministry of Tourism decree Prot. 16726 of 6 June 2024, on database interoperability
    • Decree-Law 50/2017, Article 4, converted by Law 96/2017, defining short leases
    • Royal Decree 773/1931 (TULPS), Articles 17 and 109
    • Decree-Law 113/2018, Article 19-bis, converted by Law 132/2018
    • Budget Law 2024, on the flat-rate regime
    • Judgment of the Regional Administrative Court of Lazio, 27 May 2025, on remote check-in
    • Your own Comune's regulations on tourist tax and key box placement
    • Your own Region's tourism database rules

    Important disclaimer

    This article is not legal, tax or financial advice. It is general information written for a non-specialist reader, by a key management company rather than a law firm.

    Italy layers national, regional and municipal rules, and they interact differently depending on where your property is, how many you have, and whether you operate as a business. The rules on key boxes and guest identification have changed repeatedly since late 2024, including through litigation, and they continue to differ city by city. Regional implementation of the CIN is not uniform. Tourist tax is entirely municipal. Penalty amounts are revised periodically.

    Verify your position against the official sources above, your Region's tourism office and your Comune before acting. For anything with real money or legal exposure attached, engage an Italian commercialista and, where the question is regulatory rather than fiscal, an Italian lawyer familiar with your municipality.

    If you spot an error, an omission, or something that needs updating, please tell us and we will fix it.

    Ready for smart key management

    Customize and purchase your SmartBox deployment today or you can get in touch with our sales team to learn more about how we can help your business.

    Learn about our devices

    Discover how the Keycafe SmartBox and our cloud platform secure, track, and automate every key exchange.

    Business Key Management

    Find the right plan for you

    Flexible pricing that scales with your team. Compare plans and pick what fits your operation.

    Pricing Details