Police rules for homestays India — guest ID, register, risks (2026)

Quick answer. Every homestay in India operates under a dual police-compliance stack — the Foreigners Act, 1946 + Foreigners (Tourist Visa Conditions) Rules govern foreign-guest reporting, and the state Police Act + state Hotels & Lodging-House Rules govern domestic-guest record-keeping. The non-negotiable obligations are: (1) maintain a bound, page-numbered guest register with date-stamped entries for every guest; (2) for foreign guests, file Form C electronically at indianfrro.gov.in within 24 hours of arrival; (3) antecedent-verify every staff member at the local police station and keep credentials available for inspection; (4) install CCTV at the reception / main entrance with at least 30 days of retention (state circulars increasingly mandate this); (5) display the four emergency helplines — 112 (single emergency), 1800-11-1363 (national tourist helpline), 181 (women safety), 1098 (child helpline) — at the reception. Karnataka's 27 April 2026 Government Circular (the most-detailed state directive in 2026) additionally mandates integration with the Karnataka Smart e-Beat System so the local Beat Constable's GPS-tracked visit is logged automatically, QR-code display of the KSP SOS Mobile App, and District Tourism Inspection Committees chaired by the Deputy Commissioner. Penalties for non-compliance include cancellation of state tourism registration + a fine at the DC's discretion + Foreigners Act §14 (up to 5 years imprisonment for failing to report a foreign guest). Civil liability if a crime occurs on your premises is real — host must be able to produce the guest register + Form C trail in court. This guide walks you through every police-compliance touchpoint, sample register format, what to do when a guest's ID looks suspicious, and the citizen-RTI angle to track whether your district's homestay enforcement is uniform.

The guest register (also called C-Form register or lodger's book) is the single most important police-compliance document at any homestay. Required entries per guest:

1. Full name (as per ID)
2. Postal address with PIN
3. ID type + number — Aadhaar, Passport, Voter ID, Driving Licence
4. Photocopy of the ID + Date of Birth (Karnataka April 2026 circular makes this explicit)
5. Date and time of arrival
6. Expected date of departure
7. Purpose of visit
8. Phone number
9. Number of accompanying guests
10. Signature of the guest

Format requirements:

• Bound — not a loose-leaf folder. A physical bound register with sequential page numbers is the universal default. Some states accept a digital register that produces signed daily printouts.
• In pen — no pencil, no whiteout, no erasures. Strikethroughs with initials are acceptable.
• Inspectable on demand by police, tourism inspector, FRRO officer.

Sample register columns (suggested layout):

For every non-Indian guest, the host is bound under the Foreigners Act, 1946 to file an electronic Form C at indianfrro.gov.in within 24 hours of arrival. Information needed:

• Full name + nationality + passport number + visa type + date of issue + place of issue
• Date and place of arrival in India
• Address in India + expected duration of stay
• Purpose of visit
• Photograph of the guest

Failure to file = Foreigners Act §14: Up to 5 years imprisonment + fine. The named accused is the host, not the booking platform. Air- bnb / MakeMyTrip / Booking.com do not discharge the Form-C duty for the host — they are intermediaries; the property operator is the duty-holder.

Pro tip: register on indianfrro.gov.in as a “Hotel” user (homestays use the same module) the day you receive your state tourism homestay registration. The FRRO portal needs an OTP-verified mobile + an active email. Do this before your first foreign booking — the registration takes 1–3 working days.

Every staff member who works on the premises — full-time housekeeper, part-time cook, security person, gardener, driver — must be antecedent-verified at the local police station. The state circulars increasingly mandate this in writing.

1. Where to apply: local Police Station of the area where the homestay operates (state Police's “Police Verification Certificate” or “Character Verification” service).
2. Documents the staff member needs: Aadhaar + recent photograph + address proof + 2 references.
3. Turnaround: 7–21 days.
4. Validity: typically 3 years; renewal needed thereafter.
5. Where to keep: physical and digital copy on file at the homestay; produce on demand during inspection.

The reason this matters is liability transfer. If a staff member is later involved in a crime on or near your premises, your antecedent-verification file is the document that distinguishes between “the host did due diligence” and “the host hired someone with a known record.”

State directives — most recently the Karnataka April 2026 circular — make CCTV at the reception and main entrance an explicit requirement, with at least 30 days of footage retention. Practical guidance:

• Quality: 1080p minimum; clear face capture in average lighting.
• Coverage: reception desk + main entrance + parking area + corridor leading to rooms (NOT inside rooms or bathrooms — privacy-protected zones).
• Storage: dedicated DVR/NVR with 30 days rolling retention. Cloud backup is recommended but the on-premises 30 days is the minimum.
• Review on demand: during inspection, tourism inspector / police can ask for footage of any specific time window. Have the playback workflow ready.
• Privacy notice: display a small sign at the entrance — “CCTV in operation for safety and statutory compliance. Footage retained for 30 days.”

Print and laminate the four standard emergency contacts + two state-level numbers + your own contact at the reception — visible from at least 2 metres:

• 112 — single emergency (police + ambulance + fire combined)
• 1800-11-1363 — National Tourist Helpline (multilingual, 24×7)
• 181 — Women Safety Helpline
• 1098 — Child Helpline
• Local Police Station — your jurisdictional PS direct line
• Sakhi One Stop Centre — district-level women's safety + legal aid (Karnataka 2026 circular makes this explicit; replicate in any state)
• Your own emergency contact — host's mobile, if you live separately on the same plot

Karnataka issued the most detailed state-level homestay-safety circular of 2026 on 27 April 2026 (Government Order No. TOR 134 TDO 2025). Citizens and operators in other states can use it as a best-practice template; the substantive requirements are likely to be replicated by other state tourism departments over 2026–27. Highlights:

• Mandatory display of registration certificate + applicable licences at the reception/main entrance.
• Tourism Department maintains a public list of registered homestays. Tour operators, OTAs, travel agents are recommended to work only with registered units. Non-compliant units are automatically delisted from the tourism registry.
• Antecedent verification of all staff (permanent + contract) at the local police station. Verified credentials physically + digitally on the property.
• Integration with the Karnataka Smart e-Beat System — the geographic coordinates of every registered homestay are mapped as a mandatory checkpoint for the local Beat Constable. The constable is required to physically visit the property, verify guest logs, and GPS-log the visit via the e-Beat application — generating an unalterable, time-stamped audit trail.
• District Tourism Inspection Committee — established by the Deputy Commissioner; conducts randomised, surprise inspections to verify compliance.
• KSP SOS Mobile App — QR code displayed at reception so guests can install + use the SOS function.
• Women & child safety training — homestay staff must undergo training delivered by the Department of Women & Child Development on POSH Act + POCSO Act awareness, and on dealing with incidents.
• 112 helpline geo-pre-population — accommodation units' geo-coordinates pre-loaded in the 112 emergency response system, so a distress call from a registered homestay is auto-classified as a priority tourist emergency and routed to the nearest response vehicle.
• Foreign-tourist record system — every accommodation unit must accurately log foreign-guest data using the prescribed police-department system.
• Compliance report — Deputy Commissioners required to submit action-taken report to the Tourism Commissioner.

Three scenarios you should plan for:

• Politely ask for a second ID — most travellers carry both Aadhaar and Driving Licence.
• If both still don't match, do not check the guest in. Politely refuse the booking. There is no legal obligation to host a guest whose ID you cannot verify.
• Note the incident in the register with date + time + a brief note. Do not name the guest — write “check-in declined; ID verification failed”.

• Refuse. Cash without ID is the single most common pattern in misuse of homestays for criminal activity. Your antecedent-verification + Form C duty cannot be discharged without a valid ID.
• Keep a brief note in the daily log.

• Do not confront the guest. Politely tell them their booking is being processed and step away.
• Call the local Police Station non-emergency line. A constable can come in plain clothes and verify quietly. Do not call 112 unless there's an immediate safety threat.
• If the guest leaves before police arrival, file a brief written report at the Police Station the same day — this protects you in case the same person checks in elsewhere and is later traced back.

If a guest is involved in a crime — whether as victim or perpetrator — the investigating officer's first request will be your guest register + Form C + CCTV footage + staff antecedent file. Three outcomes:

• You can produce all four → the investigation moves to the guest. Your role is witness, not accused.
• One or two are missing or defective → procedural lapse; the IO may issue a notice to the host under the relevant state Police Act + Hotels & Lodging Rules. Fine + warning likely. Civil liability remains on the guest.
• Three or more are missing → criminal liability for abetment / negligence under the Bharatiya Nyaya Sanhita, 2023 (formerly IPC) is on the table. Specifically: §107 (abetment), §174 (false statement to public servant), §175 (omitting evidence), §223 (disobedience to a public servant's order). Foreign-guest non-reporting attracts Foreigners Act §14 — up to 5 years imprisonment.

The point isn't fear — it's that due diligence is not a paperwork ritual. It's the actual evidence that distinguishes a due-diligent host from a negligent one in court. Operate accordingly.

The five pillars above are statutory minimums. The practical sixth pillar is insurance:

• Property insurance — covers physical damage from theft, fire, vandalism. Standard policies start at Rs 8,000 / year for a 2-room homestay.
• Public liability insurance (Rs 1 crore minimum) — covers third-party injury / death claims arising on your premises. Standard premium Rs 6,000–12,000 / year.
• Workmen's Compensation — if you employ staff, mandatory under the Employees' Compensation Act, 1923.
• Some states (Goa, Himachal Premier-tier) — make liability insurance a condition of registration.

Citizens who suspect uneven enforcement of homestay-safety rules in their district can file an RTI to surface the picture:

1. PIO, District Tourism Office — list of registered + delisted homestays in the last 12 months, with reasons recorded.
2. PIO, District Police — number of homestay inspections under the Smart e-Beat System (or equivalent state system), aggregated by police station.
3. PIO, Tourism Department — Action-Taken Reports submitted by Deputy Commissioners on the latest state circular.
4. PIO, FRRO — number of Form C filings received from homestays in the district in the last quarter, aggregated (no individual data, privacy-respecting).

→ Use AI RTI Drafter for the actual letter. Or see the samples hub.

No. The state homestay registration covers it. The register is a statutory duty, not a separately-licensed activity.

Yes — most states accept it provided you produce signed daily printouts on demand. Karnataka's April 2026 circular explicitly accepts physical or electronic format. Cloud-backed digital systems are increasingly preferred since they survive device loss.

The host can accept any one of: Aadhaar, Passport, Voter ID, Driving Licence. Aadhaar is not the only valid ID. Refuse to host if the guest insists on no ID at all.

Yes — but the manager becomes the named accused if anything goes wrong. The manager must also be antecedent-verified. NRI hosts should formally register a Power of Attorney (POA) with the manager, and ensure the manager is a state resident with an active local presence.

Foreigners Act §14: up to 5 years imprisonment + fine. Plus state-level fine. Plus likely cancellation of state tourism registration. Don't skip it for any foreign guest.

If you have any staff (even a part-time housekeeper or cook), yes. If you operate single-handed (you + family), no — the family members are not “staff” for police-verification purposes.

Yes — installing CCTV inside guest rooms or bathrooms is a criminal offence under multiple Indian privacy + voyeurism statutes. CCTV is permitted only at common-area points: reception, main entrance, parking, corridors.

Minimum 3 years is the universal standard. Some states (Karnataka) recommend 5 years. Permanent retention is a good practice for legal protection.

Yes — police, tourism inspector, FRRO officer can inspect on demand. Cooperate; produce the register; do not insist on prior notice (the law doesn't require it for routine inspection).

The specific e-Beat integration is Karnataka 2026. Your state may not have it. But physical Beat Constable visits to inspect guest registers exist in every state's Police Act framework. Cooperate with whichever system applies.

No. Airbnb / MakeMyTrip / Booking.com are booking platforms — they do not file Form C. The duty is on the host / property operator.

Tied: (a) operating after sale to a non-resident (homestay = owner-occupied; new owner not living there = registration void); (b) failing two consecutive surprise inspections for guest-register or staff-verification gaps; © a single Foreigners Act §14 incident.

1. [ ] Bound, page-numbered guest register procured + initial entries dated
2. [ ] Registered as “Hotel” user on indianfrro.gov.in for Form C filing
3. [ ] All staff antecedent-verified at local Police Station; certificates filed
4. [ ] CCTV installed at reception + main entrance + parking; 30-day storage configured
5. [ ] CCTV “in operation” notice displayed at entrance
6. [ ] Helpline numbers (112 / 1800-11-1363 / 181 / 1098 + local PS + Sakhi) printed and displayed
7. [ ] Registration certificate + tourism licences displayed at reception
8. [ ] Property + Rs 1 crore liability insurance in place
9. [ ] ID-verification protocol documented for staff
10. [ ] Annual training: POSH Act + POCSO Act + emergency response (where mandated)
11. [ ] Beat Constable's last visit logged (where Smart e-Beat System exists)

• Homestay India 2026 — pillar guide
• State-wise homestay rules
• Profitable homestay setup
• Government schemes for homestay owners
• Why every homestay needs a website
• Legal checks before booking a homestay
• Unregistered homestays — legal risks
• FIR / charge-sheet RTI sample

• The Foreigners Act, 1946 — §14 (penalty for non-reporting)
• The Foreigners (Tourist Visa Conditions) Rules — Form C reporting
• Bharatiya Nyaya Sanhita, 2023 — §107, §174, §175, §223 (abetment + concealment of evidence)
• Bharatiya Nagarik Suraksha Sanhita, 2023 — investigation procedure
• State Police Acts — guest-register obligations
• Indian-Tourist Hotels (Forms of Register) Rules — register format
• Employees' Compensation Act, 1923
• Karnataka Government Circular No. TOR 134 TDO 2025 dated 27 April 2026 — homestay safety + e-Beat integration
• Ministry of Tourism — Incredible India Homestay Scheme, 2021
• indianfrro.gov.in — FRRO Form C electronic filing portal
• National Helplines: 112 (single emergency), 1800-11-1363 (tourist), 181 (women), 1098 (child)

{REVIEWED}

Last reviewed: 4 May 2026 — RTI Wiki editorial team. All citations verified against publicly notified statutes and circulars as on 4 May 2026.