Comment by ArtTimeInvestor

It's not that easy. The consent has to be freely given. And data collection has to be kept at a minimum.

If hotel staff says "Ok, last step we need to do to check you in is to copy your passport" that would probably neither count as freely given consent nor as keeping data collection to a minimum.

And KYC also does not mean you have to copy the passport of a person.