BKNG · 10-Q · 2026Q3 · Full report
Litigation and Legal Risk
Booking Holdings Inc. · 2026-11-03 · Importance 29 · Surprise 24 · In source text
Competition and consumer-law disputes have led to private litigation, including ongoing parity-related claims by German hotels against Booking.com. In the Netherlands, two foundations filed claims on behalf of European hotels and consumers, with the consumer claim also alleging misleading practices by Booking.com and Agoda; a similar parity claim has been asserted in the United Kingdom. The filing says additional claims may arise in Spain and France and that adverse outcomes could require damages or changes to business practices, although it does not quantify potential exposure.
Key facts
- In April 2026, Booking.com notified certain data protection authorities after detecting that unauthorized third parties had accessed certain guests' booking information; Booking.com remediated the issue and is cooperating with authorities. source
- Booking Holdings Inc. may face follow-on investigations or litigation arising from data security incidents and may receive a fine or be required to make commitments to data protection authorities, consumers, or partners. source
- Two Dutch foundations filed contractual-parity claims on behalf of European hotels and consumers; the consumer claim also alleges misleading practices by Booking.com and Agoda. source
- In the first quarter of 2026, Booking Holdings Inc. entered favorable settlements resolving litigation matters in which it was a plaintiff and received a benefit; the amount is omitted in the provided text. source
- German hotels have filed parity-related claims against Booking.com, and the litigation is ongoing. source
- A contractual-parity claim has been asserted against Booking.com on behalf of accommodation providers in the United Kingdom. source
Impact estimates
| metric | direction | stage | expected | basis |
|---|---|---|---|---|
| liability | negative | contingent | — | Booking Holdings Inc. may face follow-on investigations or litigation arising from data security incidents and may receive a fine or be… |