Data lies at the core of all smart tourism activities as tourists engage in different and personalized touristic services while traveling or in holidays. From these interactions, a digital data trail is seamlessly captured in a technology embedded environment, and then mined and harnessed in the context of Smart Tourist Destinations to create enriched, high-value tourism experiences for tourists, as well as granting destinations with competitive advantages. The perceived enjoyment has to be considered within the legal framework of data protection by exposing potential risks to data protection and privacy, as well as the available answers given by the General Data Protection Regulation.