Throughout 2008 Sol Meliá carried out an Audit of compliance with Law 15/1999 of 13 December on Personal Data Protection, an adaptation of Royal Decree 1720/2007 of 19 January containing regulations on data protection and improvements in the handling of personal data. In particular:

1. Performance of an audit by Ernst & Young every two years of compliance with the data protection measures for medium and high level personal information in automated data files.
2. Performance of an audit and adaptation of company processes with regard to compliance with data protection measures for non-automated files with personal information.

There has only been one claim by a customer against Sol Meliá in Spain brought before the Spanish Data Protection Agency for the protection of their rights. The case was resolved by the Spanish Data Protection Agency on 7 April 2009, ruling that Sol Meliá was not required to issue a new certification as it had been proven that the Company had cancelled the personal data of the claimant during the Protection Rights procedure.

There are no such cases outside of Spain.