The legal dimensions of computerisation in the tourism and hospitality industry are multifaceted, encompassing issues related to data protection, intellectual property rights, contracts, liability, privacy, and compliance with national and international regulations. As the industry increasingly relies on information management systems (IMS) to handle bookings, customer relationships, marketing, and operational processes, understanding the legal implications of computerisation becomes crucial to avoid disputes, ensure customer trust, and maintain regulatory compliance. One of the primary legal concerns is data protection and privacy. Tourism and hospitality businesses collect extensive personal information from customers, including names, contact details, passport numbers, credit card information, travel preferences, and sometimes sensitive data like health information for certain types of travel packages. Information management systems centralize this data for efficiency, but they also become a target for misuse or cyberattacks. For instance, the implementation of customer relationship management (CRM) systems by hotels or online travel agencies (OTAs) involves storing large volumes of personal data. Legal frameworks such as the General Data Protection Regulation (GDPR) in Europe or the Information Technology Act in India require organizations to ensure the security of personal data, obtain explicit consent before processing it, and provide mechanisms for customers to access, correct, or delete their data. Failure to comply with these legal requirements can result in substantial fines and reputational damage. For example, Marriott International faced a significant fine due to a data breach affecting millions of customer records, highlighting the consequences of inadequate legal compliance in computerised systems. Another dimension is intellectual property rights (IPR). Tourism and hospitality