The data question: how Costa Mar's young tourism workers became a federal privacy flashpoint

Catalina Méndez was nineteen when she started working the front desk at an eco-lodge near Puerto Azul. The lodge's booking system—a major international platform—required her to create an account using her full name, date of birth, and phone number. She never asked why, and the lodge manager never explained. Now, eighteen months later, federal regulators are asking the same question, and Catalina's data is part of a larger pattern that has exposed gaps in how the Republic protects young workers in the digital tourism economy.

The Federal Civic Affairs Ministry launched an inquiry in June into data-collection practices by international tourism platforms operating in Costa Mar. The inquiry was triggered by a complaint filed by the Costa Mar Labour Collective, a union representing seasonal and part-time workers in hospitality and eco-tourism. The Collective alleged that platforms were collecting and retaining personal information from workers—often teenagers and young adults—without clear consent or explanation, and that the data was being used for purposes beyond booking management, including targeted advertising and algorithmic worker-assignment systems.

What began as a regional labour dispute has become a test case for federal privacy law. The outcome could affect how all four regions regulate digital commerce and worker data, and it may force international platforms to restructure their operations across the entire Republic.