There is little security risk with the information presented via the Housekeeping and Maintenance App.  The guest’s name is presented on a Stay Over Clean, as it’s relevant to that particular clean. But for a Full Clean (ie, when a Guest is checking out or a room has been ‘Vacant Dirty’ for > a day) there is no Guest name presented on the Request ticket, just the detail that it’s a ‘vacant dirty room’.  

 

The Room number is always relevant and associated when a Housekeeping request is created.  The Room Type is presented to the User when associating ‘Bulk Housekeeping' requests.  

 

Whatever staff writes on a Maintenance request could contain PII, but it’s usually pictures of broken or damaged things (toilets, mirrors, concrete, etc) and not any personal identifying data of a guest. Rarely is a Guest name used on a Maintenance request, but management should train staff to avoid doing so.

 

We often get asked whether to provision a device to use for the daily cleaning or maintenance, or have staff 'Bring Your Own Dervice' (BYOD).  We have hotels who provision ‘hotel-owned’ devices to staff, who pickup a device for the shift and then fulfill those tasks as that 'device ID', such as HK 09. We have more properties who have their staff use their own devices, as it’s usually easier - and cheaper - for everyone.  Again, very little PII ever gets saved with a Housekeeping or Maintenance request.