I want to be transparent about something before this analysis begins: I have a home in Eagle Rock, Missouri — listed on Airbnb, VRBO, and other platforms as Eagle's Landing Lakehouse. It has a hot tub — and that detail is not incidental to this analysis. A hot tub is precisely the kind of high-risk optional amenity that sits at the center of Airbnb's most consequential policy change: the restriction on separate guest contracts. For years, hosts like me have required guests to sign an assumption of risk and hold harmless agreement before using the hot tub — a basic, standard, legally sound liability management tool. Airbnb's new policy puts that tool in jeopardy. So when I say this policy creates real, material risk management problems, I am not speaking theoretically. I am speaking as someone who has to solve those problems before November 20.
That personal stake shapes this post. But so does more than twenty years in enterprise risk management, including serving as Chair of the U.S. Technical Advisory Group for ISO 31000 — the international standard on which the ARM™ curriculum is heavily based. My perspective on risk extends well beyond the classroom: I was recently quoted in Global Finance Magazine — published October 8, 2026 — on the emerging crisis of AI insurance exclusions, alongside the chief economist of the Insurance Information Institute and the CEO of a leading AI insurance platform. That article appears in the October print issue of Global Finance, a publication covering risk and finance at the highest levels globally. What Airbnb is doing right now has serious ERM implications on multiple levels: for Airbnb as a platform, for the hundreds of thousands of hosts whose properties make that platform possible, and for the guests who book those properties without fully understanding the liability gap that is opening between them and their hosts.
This post is longer than most One Minute Risk Manager articles because the story is more complex than most. There is a lot to unpack — and it all matters.
In the October 2026 issue of Global Finance Magazine, I was quoted alongside the chief economist of the Insurance Information Institute and the CEO of a leading AI insurance platform on the emerging crisis of AI exclusions in corporate liability coverage. The article — "AI Insurance Is a Risk Officer's Nightmare" by Paula L. Green — covers how more than 60 property and casualty carriers have filed to adopt AI exclusions, creating coverage gaps in D&O, E&O, EPLI, and general liability that most executives do not yet know exist.
My observation in that article applies directly to what Airbnb is doing now: "The exposure existed before the exclusion; the exclusion simply made it visible." Airbnb's policy change does not create the liability risk that hot tub hosts carry. It makes that risk visible — by removing the documentation tools hosts relied on to manage it. That is the same dynamic playing out in two very different industries at the same moment. Risk management principles do not change with the context. Only the specifics do.
Context: Understanding the Stakes for Airbnb
Before analyzing the policy itself, it helps to understand the financial scale of what Airbnb is trying to protect — and what it is risking by mishandling this.
Airbnb operates as a two-sided marketplace. On one side are guests — the demand side — who pay to book stays. On the other side are hosts — the supply side — who provide the properties that make those stays possible. The platform's entire business model depends on both sides showing up. Guests without listings have nowhere to go. Listings without guests generate no revenue.
The fundamental asymmetry in this relationship — the one that the new policy fails to adequately respect — is that Airbnb can market aggressively to acquire guests at scale. Acquiring hosts is a different and slower process. You cannot manufacture a well-maintained lakehouse with a hot tub in a desirable location on demand. Every host who leaves the platform, blocks their calendar, or moves to a competitor takes an irreplaceable asset with them.
That is the business reality that should have been the starting point for any ERM analysis of a policy change of this scope. It was not — and the result is a boycott movement organized specifically to demonstrate that reality in the most visible way possible.
What Airbnb Actually Changed — The Full Picture
On October 20, Airbnb published a resource center article titled "Important changes to house rules" and simultaneously emailed all hosts. The changes take effect for all reservations booked on or after November 20, 2026. The media has focused almost entirely on the checkout chore restrictions. That is the least important part of what changed.
- Maximum number of overnight guests
- Quiet hours (set by the host)
- No events / no parties
- No pets (or pet limits)
- No smoking or vaping
- No commercial photography
- Lock up at checkout
- Used dishes placed in the sink
- Used towels gathered (not washed)
- Trash separated into indoor bins
- Turn off A/C when leaving
- Washing and putting away dishes
- Stripping beds or starting laundry
- Taking garbage off-site
- Restricting guest access to any advertised amenity (e.g. charging extra to use a listed hot tub, or prohibiting use of listed A/C)
- Signing a separate guest contract (with narrow exceptions)
- Providing government-issued ID
- Additional rules communicated by message
- Rules posted on signs inside the home
- Any rule added after the booking is confirmed
- Chores that belong to a professional cleaner
This rule is widely misread and worth clarifying before going further. It does not mean hosts cannot set safety conditions on how an amenity is used. You can still require guests to shower before entering the hot tub, limit occupancy, prohibit unsupervised children, or specify safe operating procedures. Those are use conditions — and they belong in your house rules.
What it does mean is that if a hot tub, pool, kayak, or any other amenity is advertised on your listing, you cannot then require guests to pay an extra fee to access it, prohibit them from using it altogether, or add restrictions that effectively deny them what they booked. The guest saw the amenity, paid for the stay expecting to use it, and Airbnb's position is that blocking access after booking is an unreasonable bait-and-switch.
The risk management implication runs in the opposite direction from what many hosts assume: Airbnb is telling you the guest is going to use the hot tub. Your liability management strategy must be built around that reality — which makes the assumption of risk and hold harmless contract more essential, not less. You cannot restrict access; you can and should document the terms of that access through a properly scoped guest contract.
There are three elements of this policy change that carry the real ERM weight: the contract restriction, the rule communication restriction, and the enforcement mechanism. Each deserves individual attention.
The Contract Restriction — The Change Nobody Is Talking About
Under the new policy, hosts are generally not allowed to require guests to sign a separate contract. The stated exceptions are: legal requirements, HOA rules, monthly stay rental agreements, Airbnb Luxe listings, and "coverage for optional amenities like golf carts."
Let that sink in for a moment. Golf carts are explicitly listed as an example of an amenity that can justify a separate contract. Hot tubs — which are involved in hundreds of drowning incidents and thousands of injury claims in the United States every year — are not. The policy does not define "optional amenity." It does not say whether hot tubs, trampolines, fire pits, kayaks, paddleboards, or pools qualify. It says "like golf carts" and leaves hosts to guess.
This is not a minor ambiguity. It is a liability gap written into the policy by omission — and hosts with high-risk amenities are the ones who will bear the consequences of that gap when something goes wrong.
There are an estimated 1.5 million short-term rentals in the United States with hot tubs. Hot tub liability is not hypothetical. Courts have awarded substantial damages against STR hosts for injuries including drowning, chemical burns, slip-and-fall incidents, and bacterial infections including Legionnaires' disease. The legal precedent in cases like Poage v. Cox LLC and Smith v. Airbnb establishes that hosts can be held liable for guest injuries at listed amenities — and the standard industry defense is a signed assumption of risk and hold harmless agreement.
Airbnb's new policy restricts hosts from requiring guests to sign exactly that kind of agreement. What is more, Airbnb explicitly states it does not help enforce host contracts, nor does it require guests to sign them. The contract can be uploaded to the listing. The guest must acknowledge it before booking. If a guest later claims they did not meaningfully understand or agree to the waiver's terms, the host is in litigation with a document Airbnb itself treated as advisory rather than binding. Every host with a hot tub, pool, trampoline, kayak, or other elevated-risk amenity now has a liability management problem that Airbnb just made significantly harder to solve.
The Rule Communication Restriction — A Governance Problem in Disguise
The new policy also prohibits hosts from communicating rules through messages, signs inside the home, or any method outside the official House Rules section of their Airbnb listing. This sounds like a reasonable standardization measure — and it would be, if the Airbnb listing editor were capable of capturing every rule a host legitimately needs.
It is not. The listing editor offers seven standard rule categories. Many hosts have property-specific safety requirements that do not fit those categories — rules about well water, septic systems, bearing-weight limits on decks, access roads that require four-wheel drive in winter, or specific instructions for operating equipment like hot tub controls or generator backup systems. Under the new policy, none of those can be communicated via in-home signage or direct messaging as enforceable rules. They must fit the listing editor's structure or they do not exist as rules at all.
For a property like Eagle's Landing Lakehouse, this is not an abstract concern. The instructions for safe hot tub operation, the rules around maximum occupancy in the tub, the requirement to shower before entering — these are not checkout chores. They are safety protocols. And the policy just made them harder to enforce.
The Enforcement Mechanism — Who Actually Has Power Here
Airbnb has positioned the enforcement mechanism as a protection for both guests and hosts: if a host's rules are flagged as non-compliant and not corrected, guests will see an alert on the listing ("includes cleaning requests") that reduces booking conversion. Hosts can appeal, but the timeline and outcomes of that process are not defined in the policy.
Read that structure carefully. Airbnb is the judge, the enforcement mechanism, and the arbiter of appeals — with no defined standards for any of the three. A host who believes their hot tub waiver qualifies under the "optional amenity" exception has no clear pathway to confirm that before November 20. They can upload the contract and hope, or they can remove it and lose their liability protection. That is not a governance structure. It is a risk transfer mechanism dressed up as a policy update.
The Host Revolt — What the Boycott Movement Is Really About
Within 24 hours of the October 20 announcement, organized host opposition was visible and growing across social media. Facebook groups with thousands of members began coordinating. A National Host Action Day was announced for November 20, 2026 — timed deliberately to coincide with the policy's effective date. The movement's stated demands go far beyond the dishes question:
1. Fair and transparent service fees — the 15.5% host service fee structure, recently implemented, is a particular flashpoint. Hosts note that Airbnb collects fees from both sides of the transaction while bearing none of the operational risk.
2. Reasonable property protections — the AirCover $3 million damage protection sounds substantial in marketing materials. In practice, hosts report significant friction in claims processing and payouts that do not reflect actual replacement costs.
3. Fair dispute resolution and meaningful appeals — the perception that Airbnb's dispute resolution systematically favors guests over hosts is deeply embedded in the host community. Every experienced host has a story. Many have multiple.
4. Host representation in major policy decisions — this is the one that matters most from an ERM perspective. Hosts want a seat at the table when decisions that affect their businesses are being made. What they are getting instead is a 30-day email notice.
5. Accountability when guests violate enforceable rules — under the new policy, house rules are binding and requests are encouraged. But the mechanism for enforcing binding rules is to contact Airbnb and "work through appropriate next steps." Hosts who have done this before know what that means in practice.
One widely shared organizing post captures the movement's fundamental argument with precision: "We provide the properties. We make the investments. We pay the mortgages, utilities, maintenance, cleaning and insurance. Yet Airbnb continues making decisions that affect how we operate, what we can require of guests, and how much we pay to use the platform. NO HOSTS. NO AIRBNB."
That last sentence is not hyperbole. It is an accurate description of how a two-sided marketplace works — and it is the risk Airbnb appears to have materially underweighted in its policy development process.
It is also worth noting that guests are not uniformly opposed to the host movement. Many guests who follow STR communities understand that the quality of their experience depends directly on hosts who are willing to maintain and invest in their properties — and that a platform that makes hosting untenable will ultimately degrade the guest experience as well. The boycott movement has received meaningful guest solidarity precisely because the underlying argument is sound: Airbnb cannot operate without the hosts who supply it.
ARM™ 400 Chapter 2 teaches that effective risk identification requires stakeholder mapping — a systematic analysis of every party whose actions or reactions can materially affect operations. Applied to Airbnb, that map has three primary parties: guests (demand side), hosts (supply side), and the platform itself. The ARM™ framework requires assessing not just what each stakeholder wants but what their capacity for organized action is.
Hosts are not passive suppliers. They are small business owners with organized communities, shared communication channels, legal standing to breach platform contracts, and the ability to coordinate collective action at scale. A stakeholder map that failed to account for that capacity — and that produced a policy with 30 days' notice for a change of this magnitude — was not adequate to the exposure.
What Airbnb Should Have Done: The ERM Pre-Decision Analysis
Here is the honest ERM question: did anyone at Airbnb genuinely not see this coming? The answer almost certainly is that some people inside the company did see it coming — and were either overruled, unheard, or working within a governance structure that did not give adequate weight to supply-side risk. That is the structural problem the ARM™ curriculum is designed to prevent.
A properly structured ERM process applied before this policy was finalized would have moved through at least five questions that, based on the outcome, appear not to have been asked with sufficient rigor:
Question 1: What Does Our Stakeholder History Actually Tell Us?
This is not Airbnb's first host-relations crisis. The pattern is well documented. An April 2026 terms of service update required hosts to actively re-accept new terms on a tight deadline or lose access to their bookings and payouts. A September 2025 chargeback policy change shifted financial liability for disputed transactions from Airbnb to hosts — with minimal lead time and no meaningful consultation. Before that, repeated changes to cancellation policy, review systems, and search ranking algorithms consistently favored the guest experience at the expense of host predictability.
When an organization repeatedly triggers the same stakeholder response — resentment, organized opposition, calls for representation — with the same type of decision, that pattern is itself a risk signal. ARM™ 400 Chapter 1 is explicit: risk management must be systematic and continuous. A recurring pattern of stakeholder conflict is not a run of bad luck. It is evidence that the governance structure has a structural gap — and in Airbnb's case, that gap is the absence of any meaningful host representation in policy decisions that directly affect host businesses.
Question 2: What Are the Second and Third-Order Consequences of This Policy?
The first-order consequence of restricting checkout chores is obvious: guests face fewer requests. Airbnb's intent is to improve the guest experience, and in narrow terms this accomplishes that. But second and third-order consequences compound the picture significantly.
The second-order consequences include: cleaning cost increases that force hosts to raise cleaning fees (partially undermining the guest experience improvement), reduced host investment in amenity maintenance when liability protections are weakened, a potential exodus of high-quality hosts who cannot economically absorb the operational changes, and the liability gap for amenity-intensive properties that may lead to amenity removal rather than risk acceptance.
The third-order consequences are longer and harder to model but more significant: a degraded supply of premium STR properties as professionalized hosts shift investment to platforms with better governance, normalized host-guest conflict as the enforcement mechanism creates adversarial dynamics around compliance alerts, and the precedent that Airbnb will continue changing material operating terms with 30 days' notice and no host representation — accelerating platform diversification and reducing host loyalty at exactly the moment Airbnb needs supply-side commitment.
ARM™ 400 Chapter 4 — Analyzing Risk Events — teaches that risk assessment must trace consequences through their full causal chain, not just their immediate effects. A policy designed to reduce guest complaints by restricting host chore requests will succeed at that narrow objective while creating a cascade of second and third-order effects that materially harm the platform. That is not a good trade.
Question 3: Have We Actually Modeled the Liability Implications of the Contract Restriction?
This is where Airbnb's ERM failure becomes most consequential — and most difficult to defend. The company's own AirCover program provides hosts with up to $3 million in liability protection. The marketing language is prominent. The fine print is less so.
AirCover does not replace a signed liability waiver. It covers certain categories of claims arising from Airbnb-mediated stays, but it has coverage limits, exclusions, and a claims process that hosts describe as significantly more difficult to navigate than the marketing implies. The standard risk management approach for a property with a hot tub or other elevated-risk amenity is layered: a signed waiver plus adequate STR insurance plus AirCover. That layered approach is now restricted at its most legally significant layer — the signed waiver — by a platform whose terms simultaneously hold hosts solely responsible for regulatory compliance and legal liability.
Airbnb's own terms of service state explicitly that hosts "are solely responsible for making sure that renting your property on Airbnb is legal where you live, including checking your lease, HOA rules, and any local permits or registration requirements." Read that alongside the new contract restriction and the tension is immediate: Airbnb holds hosts responsible for legal compliance, then restricts the documentation tools hosts use to comply. Those two positions are in direct conflict, and the conflict will be resolved in a courtroom when a guest is injured at an inadequately protected amenity and Airbnb's own policies are entered into evidence.
Question 4: What Does a 30-Day Implementation Timeline Actually Signal to Hosts?
Implementation timeline is itself a risk management decision, and Airbnb made a poor one. Thirty days is not enough time for a host to: consult a real estate or hospitality attorney about the contract exception, contact their STR insurance broker about coverage adequacy without a signed waiver, audit every existing listing rule and rebook any non-compliant rules in the new format, restructure cleaning operations and cleaning fee pricing to account for the new turnover requirements, or assess whether their high-risk amenities remain economically and legally viable under the new framework.
A risk-informed implementation timeline for a change of this magnitude — affecting millions of hosts, changing legal documentation practices, and altering the operational economics of every STR property on the platform — would be 90 to 180 days minimum. Thirty days signals one thing to hosts: Airbnb did not consider host preparation time to be a relevant variable in its policy design process. That signal, once sent, is very difficult to unsend.
Question 5: Is There a Better Governance Structure Available That Achieves the Same Objective?
The answer is clearly yes — and identifying that alternative is what a proper pre-decision risk assessment would have produced. The guest experience problem Airbnb is trying to solve is real. Excessive checkout chore lists are a genuine guest pain point and a legitimate policy concern. Nobody is arguing that hosts should be able to require guests to mow the lawn or repaint the guest bedroom before checkout.
But there is an enormous difference between solving that problem through a collaborative process with host representation and solving it through a unilateral announcement with 30 days' notice. The former produces a policy that hosts feel ownership of and are motivated to follow. The latter produces a boycott. Both can reach the same regulatory outcome. Only one of them does so without creating a stakeholder crisis.
ISO 31000 — the international risk management standard on which the ARM™ curriculum is based — identifies the meaningful participation of stakeholders as a foundational principle of sound risk management. It is explicit that this means genuine participation in the design of decisions that affect stakeholder interests — not notification after those decisions are finalized.
Meaningful participation is not the same as notification. An email announcing a policy effective in 30 days is notification. A structured advisory process that includes host representatives in policy design before decisions are finalized is participation. Airbnb has been delivering the former and describing it as the latter. The host boycott movement is the market's verdict on that distinction — and it is a verdict that any organization managing a two-sided marketplace should take seriously.
As former Chair of the U.S. Technical Advisory Group for ISO 31000, I want to be direct: this is not a marginal compliance question. Stakeholder participation in risk governance is a core principle of the standard because experience across industries has repeatedly demonstrated that decisions made without adequate stakeholder input systematically underestimate implementation risk and overestimate organizational resilience. Airbnb has now provided one more data point in support of that principle.
What a Better Policy Development Process Would Have Produced
A risk-informed process for a change of this magnitude would have included, at minimum: a formal host advisory structure — even a rotating advisory board of 20 to 30 active hosts representing different property types, markets, and experience levels — given genuine input before the policy was finalized. It would have included a 90-to-180-day implementation timeline. It would have included explicit written guidance on which amenities qualify for the "optional amenity" contract exception, reviewed by legal counsel with host input. It would have included a defined and time-bound appeals process with published standards. And it would have included a phased enforcement approach — education before compliance alerts, compliance alerts before listing suppression.
None of that would have required Airbnb to abandon its objective of improving the guest experience. It would have produced a policy that hosts felt they had a hand in shaping — which is precisely the difference between a change that gets implemented and a change that gets boycotted.
The ERM Analysis: Airbnb's Four Material Risks
Setting aside what should have happened and focusing on where things stand now, Airbnb faces four material risk categories that this policy has created or significantly amplified:
The ERM Analysis: The Host's Perspective
I want to speak directly to hosts now — particularly hosts with properties like Eagle's Landing Lakehouse, where amenities like hot tubs create elevated liability exposure that a standard Airbnb listing cannot adequately address. I am going to be more direct here than a typical risk analysis would be, because the stakes are personal and the timeline is short.
The new policy does not eliminate your liability. It eliminates one of your most important tools for managing it. That distinction matters enormously, and the response it requires is proactive, not reactive. Waiting to see how enforcement plays out is itself a risk management decision — and it is the wrong one.
The Contract Issue in Depth: What Hosts With Hot Tubs Actually Need to Know
I have a hot tub at Eagle's Landing Lakehouse. I have had a signed guest agreement — covering assumption of risk, hold harmless provisions, release language, and specific safety requirements for hot tub use — as a condition of every booking. That agreement is my primary liability management tool for the hot tub exposure. The new Airbnb policy has just put that tool in legal jeopardy, and I am dealing with it the same way I am recommending every other host deal with it: directly and before November 20.
Here is the specific legal situation for hosts with hot tubs and similar amenities. Airbnb's policy says contracts are allowed for "coverage for optional amenities like golf carts." A hot tub is an optional amenity — it is a listed feature that guests can choose to use or not use, much like a golf cart. The "like golf carts" language is illustrative, not exhaustive. A reasonable legal argument exists that hot tubs qualify under this exception.
But "a reasonable legal argument exists" is not a legal opinion, and it is not sufficient protection for a host facing a personal injury claim. What hosts with hot tubs need is a written assessment from a licensed real estate or hospitality attorney in their jurisdiction, confirming that their specific waiver language falls within the "optional amenity" exception, meets Airbnb's contract requirements as outlined in the help article linked from the policy page, and is legally adequate under applicable state law for assumption of risk and hold harmless provisions.
What hosts with hot tubs also need is a conversation with their STR insurance broker — specifically asking whether their policy's liability coverage for hot tub injuries assumes the existence of a signed waiver, and what the coverage implications are if that waiver is not present or is challenged as unenforceable.
One thing worth knowing: the barrier to building a direct booking site has dropped dramatically. AI platforms like Claude can design and build a fully functional, professional direct booking website in a matter of hours — with a calendar, booking inquiry form, photo gallery, amenity listings, house rules, and guest contract acknowledgment built in. I know this because I did exactly that for Eagle's Landing Lakehouse in response to this policy change. What previously required hiring a web developer, paying for a booking platform subscription, and weeks of back-and-forth can now be accomplished in an afternoon.
The economics of platform diversification have fundamentally changed. The only remaining barrier is deciding to act — and Airbnb has just provided a compelling reason to make that decision.
The Golf Cart Exception — And Why Hot Tubs Belong in the Same Category
I want to address this directly, because it is the specific legal rationale I am using at Eagle's Landing Lakehouse — and because I believe it is the right call for any host with a hot tub who wants to maintain a defensible liability management posture under the new policy.
Airbnb's policy states: "Contracts are only allowed for a few reasons under the new policy. Examples include... coverage for optional amenities like golf carts."
That language does two things that matter legally. First, it acknowledges that optional amenities can justify a separate guest contract. Second, it uses "like golf carts" as an illustrative example — not an exhaustive list. The word "like" is doing significant legal work in that sentence. It signals that golf carts are representative of a category, not the sole member of it.
Building the Argument: Hot Tubs and Golf Carts Are the Same Category of Risk
A golf cart is an optional amenity — a feature the host offers beyond basic lodging that a guest can choose to use or not use. Its use carries specific risks that standard lodging does not: mechanical operation, traffic interaction, tipping and rollover, potential injury to operators and bystanders. Because of those elevated risks, Airbnb has explicitly recognized that a separate contract — covering guest acknowledgment of those risks, assumption of liability for their use, and hold harmless provisions protecting the host — is appropriate and permitted.
A hot tub is an optional amenity by the same definition. It is a feature offered beyond basic lodging. Its use carries specific risks that standard lodging does not: thermal injury from high water temperatures, bacterial contamination including Legionnaires' disease, chemical exposure from improper pH or sanitizer levels, drowning risk particularly when alcohol is involved, and slip-and-fall risk on surrounding surfaces. These are documented, litigated, and in some cases lethal risks. Courts have awarded substantial damages against STR hosts for hot tub injuries. The liability exposure is not theoretical.
Golf cart — why a contract is permitted: Optional amenity. Mechanical operation risk. Potential for serious injury. Guest must understand operational rules and accept responsibility for safe use. Host has legitimate need to document guest acknowledgment of those risks before use.
Hot tub — why the same logic applies: Optional amenity. Temperature, chemical, bacterial, and drowning risk. Potential for serious or fatal injury. Guest must understand operational rules (shower before entry, no alcohol, maximum occupancy, no unsupervised children) and accept responsibility for safe use. Host has an equivalent — and in many cases greater — legitimate need to document guest acknowledgment of those risks before use.
The risk profile of a hot tub is not less serious than that of a golf cart. By any reasonable measure, it is more serious. A policy that permits contracts for golf carts and prohibits them for hot tubs would be internally inconsistent in a way that should not survive legal scrutiny. The "like golf carts" language is better read as Airbnb establishing the principle — optional amenities with elevated risk profiles can justify a separate contract — and providing one example of that principle in practice.
How to Apply This Argument Correctly
Using the golf cart analogy as the basis for continuing to require a hot tub contract is legally reasonable — but it needs to be applied correctly to hold up if Airbnb challenges it or if a guest disputes it.
First: the contract must be uploaded to your listing under the Contracts section of your listing settings — not communicated by message, not posted on a sign inside the property. The new policy is explicit that all rules and contracts must appear in the designated sections of the listing. A contract that exists on paper but is not uploaded to the listing in the correct location will not be treated as compliant regardless of its substantive content.
Second: the contract must be specifically and narrowly scoped to the hot tub. A broad rental agreement that covers general guest conduct, checkout procedures, damage liability, and everything else is not what the "optional amenity" exception contemplates. The exception is for contracts covering the specific risks of the specific amenity. Your hot tub contract should cover exactly that: the rules for hot tub use, the assumption of risk for hot tub-specific hazards, the hold harmless and release language, and the safety requirements guests must acknowledge before using it. Keep it focused. A contract that looks like a general rental agreement dressed up as a hot tub waiver will be harder to defend.
Third: the language must be clear, reasonable, and plainly communicated. Assumption of risk clauses and hold harmless agreements are enforceable in most jurisdictions when the risk is clearly described, the language is understandable, and the guest meaningfully acknowledged the terms before the activity. Courts look unfavorably on waiver language that is buried in fine print, written in incomprehensible legalese, or that covers risks so broad as to be unconscionable. Your hot tub contract should clearly state what the risks are, clearly state that the guest is assuming those risks voluntarily, and be written in plain English that a guest can actually read and understand.
Fourth: document the guest's acknowledgment in a format you can retrieve. Under Airbnb's current framework, guests must agree to the uploaded contract before booking — Airbnb records that acknowledgment. Maintain your own records as well. In any subsequent dispute, your ability to demonstrate that the specific guest saw, acknowledged, and agreed to the specific contract before arriving at the property is your primary defense. Do not assume Airbnb's records will be readily available to you in litigation.
The argument laid out above is legally reasonable and, I believe, defensible. It is not a legal opinion, and it is not a substitute for one. The enforceability of assumption of risk and hold harmless clauses varies significantly by state. Some states impose strict requirements on waiver language. Some jurisdictions limit the enforcement of pre-injury liability waivers in recreational settings. The specific language of your contract, the specific nature of your amenity, and the specific law of your state all matter.
Before November 20, every host with a hot tub or other elevated-risk amenity who intends to continue requiring a guest contract under the "optional amenity" exception should get a written legal opinion from a licensed real estate or hospitality attorney in their state confirming that their contract qualifies under the exception and is enforceable under applicable state law. The golf cart analogy gives you the policy argument. An attorney gives you the legal foundation to stand on if that argument is ever tested.
The Deeper Point: Airbnb Created This Ambiguity
It is worth pausing to note that this entire analysis — the golf cart comparison, the "like" language, the narrowing of contract scope, the legal opinion requirement — exists because Airbnb wrote a policy with an ambiguous exception and provided one example without defining the category that example represents.
A company with 8 million listings, $10 billion in annual revenue, and a legal department that certainly reviewed this policy before publication could have listed the amenities that qualify for the contract exception. It could have published a list of examples. It could have created a submission process for hosts to seek pre-approval for their specific contract. It chose none of those approaches. Instead it published "like golf carts" and left hosts and their attorneys to work out the implications.
From a risk management perspective, that ambiguity is itself a risk — for Airbnb. A policy that hosts, attorneys, and courts are actively interpreting in inconsistent ways is a policy that will produce inconsistent enforcement, inconsistent appeals outcomes, and inconsistent litigation results. The company that wrote the ambiguity owns the consequences of it.
For hosts, the ambiguity is an opening. It is not a comfortable one, and it requires professional legal guidance to navigate safely. But the golf cart exception is real, the hot tub risk profile exceeds it, and the argument for continuing to require a properly scoped hot tub contract under the new policy is sound. Make that argument — in writing, with legal support, and in the correct location in your listing settings — before November 20.
The Broader ERM Lesson: Platform Risk Is Real Risk
I want to close with a point that goes beyond the Airbnb situation specifically, because it is relevant to every business that operates within or depends upon a platform ecosystem — and that includes an increasing number of organizations across every industry.
Platform dependency risk is a category of operational risk that the ARM™ curriculum addresses under multiple chapters — supply chain risk, operational risk, and treating risk — but that many practitioners underestimate because it is invisible when the platform relationship is functioning well. It only becomes visible when the platform changes the terms.
The structure of the risk is straightforward: when your primary revenue channel is controlled by a third party that sets its own rules, changes them unilaterally, and holds dispute resolution authority over conflicts with your customers, you have a concentration risk that is material regardless of how good the relationship feels today. Every Airbnb host who has built a business on the platform without simultaneously building alternative channels has been carrying this risk since the day they listed their first property. November 20, 2026 is the day it became impossible to ignore.
ARM™ 400 Chapter 5 on treating risk is explicit: risk retention — the conscious decision to accept a risk without transferring or mitigating it — requires that the retention be conscious and deliberate, based on an assessment of the exposure and a judgment that it is acceptable. Inadvertent platform concentration risk is not deliberate retention. It is a gap in the risk identification process. The ERM response is to identify the gap, assess the exposure, and implement a treatment strategy — before the platform announces its next policy change.
For years, hosts who understood their platform concentration risk pointed to the same barrier: building a direct booking site was expensive, time-consuming, and technically demanding. That barrier no longer exists in the way it once did.
AI platforms like Claude can design and build a fully functional, professional direct booking website — calendar, booking inquiry form, photo gallery, amenity listings, house rules, guest contract acknowledgment — in a matter of hours. I know this because I built one for Eagle's Landing Lakehouse in direct response to this policy change. What once required a web developer, a booking platform subscription, and weeks of coordination now takes an afternoon and costs nothing beyond the conversation.
The economics of platform diversification have fundamentally changed. The treatment for platform concentration risk — a direct booking capability that gives you a booking channel Airbnb cannot restrict, flag, or take from you — is now within reach of every host, regardless of technical skill or budget. The only remaining barrier is the decision to act. Airbnb's October 20 announcement is as compelling a reason to make that decision as you are likely to get.
If you are an ARM™ or CPCU® candidate reading this: this is ARM™ 400 Chapter 5 in its purest form. Risk identified. Treatment selected. Treatment implemented. The tool used to implement it happens to be new — but the risk management logic is exactly what the curriculum describes.
As of this writing, the November 20 effective date stands. Airbnb has not announced any modifications to the policy in response to host feedback. The boycott movement is organizing. The liability gap for amenity-intensive STR hosts is real, unresolved, and worsening as the deadline approaches. And the ERM lesson — for platforms, for hosts, and for anyone who depends on a partner relationship where one party holds disproportionate power over the terms — is directly in the ARM™ curriculum, waiting to be applied.
The story of what happens on November 20 and after will be worth watching closely — both for what it tells us about Airbnb's willingness to respond to stakeholder pressure and for what it confirms about the fragility of governance structures that exclude the people who bear the most risk from the decisions that create it.
Stakeholder Risk, Platform Risk, Legal Risk, Operational Risk — All Live in the News Right Now
The Airbnb policy story touches every major risk category in the ARM™ 400 and 402 curricula. The redesigned 2026 courses cover all of it — with exactly this kind of real-world application built into every chapter.
Sources: Airbnb Resource Center, "Important changes to house rules" (October 20, 2026); Airbnb Help Center, "Reasonable house rules and requests" policy (October 2026); Skift, "Airbnb's New Policy for Hosts: Don't Ask Guests to Wash Dishes or Strip Beds" (October 21, 2026); Rental Scale-Up, "Airbnb new house rules policy" (October 2026); TravelAwaits, "Airbnb announces new policy updates for hosts and renters" (October 21, 2026); Dexerto, "New Airbnb rules ban hosts from making guests wash dishes" (October 21, 2026); Conduct Atlas, "Airbnb Terms of Service — Host Liability for Regulatory Compliance" (April 2026); Hospitable Community, "Airbnb chargeback changes" (November 2025); BNBCalc, "Airbnb Terms of Service Update April 2026" (2026); Proper.insure, "Hot Tub Rules and Safety for Your Airbnb: What Every Host Needs to Know." Host boycott movement organizing post reproduced for editorial commentary under fair use. This post reflects publicly available information as of October 23, 2026. Nothing in this article constitutes legal or insurance advice. Hosts should consult a licensed attorney and insurance broker regarding their specific situation before making any changes to their listing documentation or coverage.


