The Peninsula’s SOTI MobiControl IoT system lets guests control in-room functions via tablets, personalizing experiences and enabling targeted upselling. However, while enhancing convenience and loyalty, concerns arise over privacy due to data collection without consent and vulnerability to cyber-attacks, as many IoT devices lack default encryption, risking guest information security.