Introduction
Hotels, inns, motels, and resorts face different insurance obligations than short‑term rentals (STRs) and bed & breakfasts (B&Bs). This guide clarifies three high‑impact areas that frequently determine coverage design and cost: innkeepers’ liability (guest property), loss of rents/business interruption, and PCI/data security exposures. References to coverage mechanics align with Summit’s hospitality guidance and product pages, which you can explore for deeper context: Hospitality Insurance, Hotel Insurance, Business Interruption, Cyber Insurance, Commercial Property, Commercial General Liability, and Directors & Officers.
Key differences at a glance
| Topic | Hotels and Inns | STRs/B&Bs | Policy notes |
|---|---|---|---|
| Innkeepers’ liability (guest property) | Commonly required; protects guest property while on premises; limits/conditions vary by policy and provincial statute. | Often excluded unless specifically endorsed; homeowner/landlord forms typically don’t cover commercial guest property. | Ask for explicit “innkeepers’/guest property” coverage and confirm where it applies (rooms, safekeeping, common areas). See Hospitality Insurance. |
| Loss of rents / Business interruption (BI) | Based on rooms revenue plus ancillary income (F&B, spa, meeting space). Indemnity periods of 12–24 months are common. | Based on booked nights/ADR and seasonality; exposure can be highly seasonal. | Triggers require insured physical damage unless otherwise endorsed. Validate waiting period and trend/seasonality factors. See Business Interruption. |
| PCI DSS and card payments | Direct card acceptance increases PCI scope; breach can create card‑brand assessments and third‑party claims. | OTA/platform processing can reduce scope, but handling any guest data still creates cyber/privacy exposure. | Cyber policies can address breach response, BI from cyber events, third‑party liability, and certain fines/assessments where insurable. See Cyber Insurance. |
| Liquor liability | Bars, restaurants, minibars, and events increase exposure. | Breakfast service may be low risk; BYO or tastings add exposure. | Coordinate GL, liquor, and event endorsements. See Hospitality and Restaurants. |
| Property & valuation | Purpose‑built commercial assets; replacement cost and equipment protection are central. | Residential dwellings used commercially; many personal/landlord forms exclude STR use. | Ensure a commercial package for buildings, contents, and equipment. See Commercial Property. |
Innkeepers’ liability: what it is and what to confirm
Innkeepers’ liability addresses loss or damage to guests’ property while on the premises or in the innkeeper’s custody. In practice, it is delivered as a dedicated insuring agreement or endorsement within hospitality packages.
What to verify in policy wording:
-
Definitions and locations: Does coverage extend to rooms, safes/front‑desk custody, parking areas, or common spaces?
-
Limits and sublimits: Are there per‑guest and aggregate limits? Any theft/mysterious disappearance sublimits?
-
Conditions and security controls: Requirements for safes, posted notices, inventory procedures, or CCTV can affect recovery.
-
Exclusions: Cash, securities, vehicles, high‑value items, or animals may be excluded or heavily sublimited.
Considerations by operation type:
-
Hotels/Inns: Expect explicit guest‑property terms embedded in the package. Align procedures (front‑desk custody logs, signage, safe availability) with the policy.
-
STRs/B&Bs: Many homeowner/landlord policies exclude guest property and business activities. Seek a commercial hospitality policy or endorsement that explicitly grants guest‑property cover. See Hotel Insurance and Hospitality Insurance.
Loss of rents (Business Interruption): modeling revenue and time to recover
Business interruption protects net income and continuing expenses after an insured physical damage event (e.g., fire) that suspends operations. Core mechanics to validate (see Business Interruption):
-
Coverage trigger: Typically requires covered property damage; confirm any extensions (ingress/egress, civil authority) and exclusions.
-
Waiting period: Commonly 24–72 hours before coverage applies; align to your downtime profile.
-
Indemnity period: Hotels frequently require 12–24 months given construction lead times; STRs with simpler rebuilds may still need extended periods in peak seasonal markets.
-
Measurement: Hotels should capture rooms income, F&B, meetings/events, spa, and other ancillaries. STRs/B&Bs should model ADR, occupancy, cleaning fees, and platform commissions to reflect true gross earnings.
-
Extra expense and expediting: Useful to relocate guests, accelerate reopening, or stand up temporary operations.
Common pitfalls:
-
Underestimating seasonal trends (STRs) and ramp‑up time post‑rebuild (hotels).
-
Forgetting dependent properties (e.g., a damaged adjacent mall/attraction that drives foot traffic) and utilities service interruption.
PCI DSS and cyber/privacy exposures in hospitality
The Payment Card Industry Data Security Standard (PCI DSS) sets technical and operational controls for handling cardholder data. In hospitality, exposure depends on how you process payments and store guest information.
Risk patterns:
-
Hotels and resorts: On‑property point‑of‑sale, PMS/POS integrations, loyalty programs, and event billing increase PCI scope and the potential for network breaches and card‑brand assessments.
-
STRs/B&Bs: Platforms (e.g., OTAs) may process cards, reducing merchant scope, yet operators still handle personal data (IDs, vehicle plates, messaging) and may store payment tokens or records that create privacy/cyber risk.
Insurance alignment (see Cyber Insurance):
-
First‑party: Incident response, forensics, notification/credit monitoring, data restoration, and cyber business interruption.
-
Third‑party: Privacy liability and regulatory defense. Many policies extend to card‑brand assessments/contractual penalties where insurable by law—read definitions and conditions carefully.
-
Risk controls: MFA on PMS/POS and email, segmented networks, EDR/AV on endpoints, timely patching, vendor due diligence, and least‑privilege access.
Underwriting and cost drivers: hotel vs. STR/B&B
Insurers weigh similar categories, but the drivers manifest differently by operation type.
-
Occupancy and controls: Number of keys/units, self‑check‑in, keyless entry, CCTV, sprinklers, alarms, and overnight staffing.
-
Premises hazards: Pools, hot tubs, gyms, elevators, kitchens, fireplaces/BBQs, and winter slip‑and‑fall exposure.
-
Food & beverage: Bars, room service, events/catering, minibars, and liquor licensing increase liability.
-
Construction and protection: Year built, updates to electrical/plumbing/roof, distance to hydrant, fire hall response, and wildfire/flood zones.
-
Revenue mix and volatility: Hotels with multiple income streams vs. STRs with seasonality and platform dependencies.
-
Vendor management: Contracts and certificates of insurance for cleaners, security, maintenance, and event vendors.
-
Claims history and housekeeping standards: Inspection cadence, documented maintenance, and guest‑complaint resolution practices.
Practical checklist for operators (Canada, excluding Quebec)
Use this list to frame broker and insurer discussions.
-
Confirm your classification (hotel/inn vs. STR/B&B) and ensure your policy is a commercial hospitality package—not a personal or landlord form.
-
Request explicit innkeepers’/guest‑property coverage; verify limits, locations covered, safekeeping conditions, and signage requirements.
-
Set BI parameters: waiting period, 12–24 month indemnity where needed, and trending for seasonality/ADR and ancillary income.
-
Map payment flows: who processes cards (you vs. platform), where cardholder data lives, and your PCI scope. Align cyber coverage to breach costs and card‑brand assessments where insurable.
-
Align GL/property with on‑site amenities (pools, gyms, spas), wildfire/flood perils, and liquor/service exposures. See General Liability and Commercial Property.
-
Review vendor contracts (cleaning, security, maintenance) for indemnities, hold‑harmless, and additional insured requirements.
-
Document risk controls: smart locks, logs, guest screening, CO/smoke detectors, emergency lighting, slip‑resistant surfaces, and incident reporting.
-
If part of a group or strata/condo: reconcile master policies and bylaws with your own schedule of insurance; consider D&O where applicable.
How Summit helps hospitality operators
Summit is an independent Canadian brokerage focused on tailored, technology‑enabled coverage for hospitality risks.
-
Market access without carrier exclusivity to curate hospitality packages for hotels, inns, STR hosts, and B&Bs. See Hotel Insurance.
-
Structured BI modeling for rooms and seasonality, with clear waiting/indemnity guidance. See Business Interruption.
-
Cyber/PCI alignment for PMS/POS stacks, OTA workflows, and privacy obligations. See Cyber Insurance.
-
Dedicated account management, fast response, and transparent compensation practices.
Note: Summit supports hospitality clients across Canada (excluding Quebec). Coverage is subject to insurer underwriting and policy wording. For tailored guidance, see Hospitality Insurance.