KBS explained: guest identity notification for hotels in Türkiye

KBS (Kimlik Bildirme Sistemi, guest identity notification) is the system through which a lodging facility in Türkiye reports who is staying, when they arrived and when they left to law enforcement. The duty comes from Law No. 1774 (1973) and covers hotels, motels, pensions, holiday villages and campsites, not hotels alone.

A guest hands over a passport at 23:40. The room is paid, the key is handed out, the invoice will follow in the morning. The identity notification is the step that most often waits, and it is the one the law ties to the moment of check-in. After reading this article you will know what KBS in Türkiye covers, who is responsible for it, how one notification lives from arrival to departure, and which questions to put to your software provider.

What is KBS in Türkiye?#

KBS is the channel through which a lodging facility reports each guest's identity, arrival and departure to law enforcement. It is a legal duty, and it exists separately from the hotel's own guest records.

The duty comes from the Identity Notification Law (Kimlik Bildirme Kanunu, Law No. 1774). The law names hotels, motels, pensions, holiday villages, campsites and similar lodging places, and requires the responsible operator to keep the identity, arrival and departure records of everyone staying, local or foreign, day by day. It also bars accommodating anyone who cannot prove their identity with an identity card or another officially valid document, so checking the document is part of the duty, not a courtesy. This is a general description, not legal advice: confirm the current text of the law and your own obligations with a legal adviser.

The operator may delegate these duties to a manager, and in that case both remain jointly responsible. An additional article requires lodging facilities to keep their records on computer and report them instantly to law enforcement by connecting to its computer terminals. In daily work, this connection is the KBS application.

KBS is a web application that the facility's authorized person enters through e-Devlet, and can open to staff with their own logins. Operational procedures, including login methods and data entry fields, are defined by the relevant security authorities. Confirm the current technical requirements with your software provider and the local authority.

Is KBS only for hotels?#

No. The duty attaches to lodging places, and the law lists pensions, motels, holiday villages and campsites beside hotels.

The list ends with "and similar lodging places", so the test is what the business does, not what the sign outside says. A twelve-room pension and a four-hundred-room resort carry the same duty. What differs is volume and how the work is organized, not whether the duty applies.

The responsible person is the operator. It is not the receptionist on shift and it is not the software provider. Delegating to a manager does not move the responsibility away from the operator: both are jointly responsible under the law.

Use the law's own vocabulary when you describe your facility. Not every certified accommodation facility is a hotel, and the notification duty does not depend on the category. If you are unsure whether your facility falls inside the list, ask the authority and your own adviser rather than assuming either way.

Where does KBS sit in a stay?#

Beside three other steps: payment, a fiscal document and personal data. In Türkiye, every stay involves a payment, a fiscal document (an invoice or e-document), a guest identity notification (KBS) and personal data (KVKK). These are the four steps of every stay in Türkiye, and they are not interchangeable.

A KBS notification is not a billing step, and a marketing consent is not a KBS notification. One passport can serve several steps at once, but each step has its own rule about what may be copied, who may see it and how long it is kept.

They also have different owners inside the hotel: the front office owns the identity step, accounting owns the fiscal document, and the data protection work usually sits with management. Design the check-in flow so all four are visible on one screen or one card. When the desk is busy, the step that is invisible is the step that gets skipped.

The common failure is not refusal. It is sequence: the payment is taken, the key is handed over, the invoice is queued, and the identity notification waits for a quieter hour.

What happens to a notification from arrival to departure?#

One record per guest, opened at check-in, corrected if a field is wrong, and closed at check-out with a reason and a time.

A Türkiye citizen's T.C. identity number is checked against the population register (MERNİS). A foreign guest without a foreigner identity number (YKN) is entered with full identity details and the passport serial number, according to the 2018 Gendarmerie guide. Under normal conditions the entry is made at the moment of check-in. That is the timing the guide describes, and it is why the desk, not the back office, is where the work belongs.

A field that cannot be updated is corrected by deleting and re-entering the record. The first entry should therefore be right, because the correction costs more than the check. Check-out is recorded with a reason and a date and time, so the record has a clean end as well as a clean start.

Confirmed reservations such as tour groups can be notified in advance, which moves part of a coach arrival off the desk at the worst moment. The notification archive lets the facility's authorized person check that entries were made correctly and on time. That archive, not the software's assurance, is the control.

For a fuller desk routine, see a front desk checklist for KBS at check-in.

KBS and KVKK: are identity details personal data too?#

Yes. The identity details you send through KBS are personal data under KVKK (kişisel verilerin korunması kanunu), so the notification duty and the data protection duty apply to the same passport at the same moment.

Collect only what the notification needs. Every extra field on a registration card is a decision someone made, not a default that arrived by itself. Limit who can see or copy documents: the 2018 guide's login scopes, guests only, staff only or both, are one lever, and physical access at the desk is the other.

Each person holding a KBS login is a person who can see guest data, so access should follow the duty rather than seniority or convenience. Retention pulls in two directions: the notification duty wants records kept, the data protection duty wants them limited. Agree one written retention period with your adviser instead of inventing one at the desk. On copying identity documents, follow your adviser's written position; rules and interpretations change, and a desk habit is hard to reverse.

For the wider picture, see KVKK for hotels: notices, consent, staff access and retention.

Who owns KBS on the day shift and the night shift?#

One named person per shift, with a named deputy, and a written handover between them.

The law allows the operator to delegate the duty to a manager, and both stay jointly responsible. Put the delegation in writing, with names and dates. The night shift is where gaps appear: late arrivals, walk-ins without a reservation, coach groups arriving after midnight.

The morning check is the archive: yesterday's entries, yesterday's corrections, yesterday's check-outs. Five minutes, one person, every day. A person without training should not hold a login; access is a duty, not a badge of seniority.

The handover note carries three things: open entries, guests still due to arrive, and corrections that are pending. If the person who owns KBS is on leave, the deputy's name is already known and the archive check does not stop.

Notifying from hotel software: what should you ask your provider?#

Ask how the notification leaves the building, what happens when it fails, and who can see the data.

The 2018 guide describes a web service module: a facility using hotel automation software can notify once the data is entered in its own program, with the identity number, password and IP address checked together on every call. A 2018 document may not describe today's rules, so confirm the current requirement with the authority.

Ask whether the notification is sent from the check-in flow itself or from a separate screen that someone has to remember. Ask what happens when the connection is down: is there a queue, who is alerted, and how is the gap closed when it comes back. Ask how a wrong field is corrected, and who inside the hotel can see the archive and create logins.

Ask whether the software keeps its own copy of the identity data and for how long, and get the answer in writing. Ask for a demonstration with a test guest, not a promise in a sales meeting. If guests send details ahead of arrival, the same questions apply; see what to ask guests before arrival in online check-in.

What to do next#

Write down who owns KBS on each shift this week, then open yesterday's archive and check it. The duty, the life of a notification, the KVKK limits, the shift owner and the software questions all rest on that one habit: someone named, every day, looking at what was actually sent.