The Rules Changed While You Were Busy: Málaga's Winter Compliance Checklist

Summer in Málaga has a reliable way of making sensible people postpone sensible decisions.

The terrace is full, the team is stretched, suppliers are late, the till is busy, and every spare hour is spent keeping the operation moving. Meanwhile, rules are updated, licensing conditions change, and the software supplier sends an email which nobody has time to read.

That is understandable. A busy season is not the ideal moment to redesign your compliance systems.

The quieter months are different. Winter is when you can check what changed, decide what applies to your business, and fix the awkward details before they become expensive interruptions. The following is a practical first pass for independent restaurants, bars, cafés, and hospitality entrepreneurs across Málaga and the Costa del Sol.

This is not a substitute for legal, tax, or occupational-risk advice. It is a checklist for asking the right questions while there is still time to act.

1. Málaga noise rules in 2026: check what your music actually means

The new Málaga noise and licensing rules have particular consequences for operators who have treated background music as harmless.

According to reporting from La Opinión de Málaga, El Español, and the relevant municipal measures, cafés and restaurants with music now face an 85 dB limit. Sound equipment is also banned on:

• Terraces;
• Marquees;
• Covered patios;
• Similar semi-open spaces connected to the premises.

In plain English, the old idea of a small speaker providing a little atmosphere outside is no longer something to assume is permitted. The “hilo musical” era, at least in these outdoor settings, has changed.

What to check this winter

If you operate a café or restaurant with music:

• Identify every speaker, television, amplifier, or sound source currently in use;
• Confirm where each item is located;
• Check whether the equipment serves an indoor area, an outdoor area, or both;
• Ask your technical adviser whether the current installation and licence match the new conditions;
• Brief managers on what may and may not be switched on during service.

For musical bars and nightclubs, the rules also introduce a new floor-area range, with a minimum of 100 square metres and a maximum of 400 square metres. These venues are also restricted in streets with homes and near residential, health, and educational zones.

That matters if you are considering buying, leasing, or converting a small premises. A venue that looks commercially attractive on a viewing may no longer be suitable for the activity you have in mind.

Do not rely on the estate agent’s description of a premises. Verify the authorised use, the location, the floor area, and the licensing history before signing anything.

2. ZAS areas and events: dates do not create a permanent exemption

Málaga’s acoustically saturated zones, or ZAS areas, continue to require careful attention. Specific exceptions were approved for particular dates, including 8 and 9 September, which is relevant to operators running events, celebrations, or seasonal programming.

The useful lesson is not that events are impossible. It is that an exception attached to one date, one area, or one permission should never be treated as a general operating right.

Before promoting a winter event, check:

• Whether the premises sits inside a ZAS area;
• Whether the event changes the use or intensity of the venue;
• Whether the existing licence covers the proposed activity;
• Whether an additional authorisation is needed;
• What time restrictions apply to the terrace and interior;
• Whether the approval applies to the exact date and format planned.

Keep copies of permissions, applications, and correspondence in one place. If a municipal officer asks what you are doing, “we did something similar last year” is not a useful compliance document.

3. Costa del Sol terrace heat rules: prepare the winter protocol now

The summer has also made one operational truth impossible to ignore: heat is now a staffing and risk-management matter, not merely a question of whether guests fancy sitting outside.

Across Andalucía, the current labour-risk framework requires operators to reduce terrace hours or suspend service when orange or red heat alerts create an unacceptable risk for outdoor staff. The precise action depends on the conditions, the risk assessment, and whether the business can genuinely protect employees working outside.

For a small café or restaurant, the practical response should be agreed before the next alert, not improvised while guests are arriving.

Your winter checklist should include:

• Who monitors official AEMET alerts;
• Which person decides whether terrace service is reduced or suspended;
• How staff are moved to indoor duties;
• What happens to bookings;
• How the change is communicated to customers;
• Where the decision is recorded.

A sensible heat protocol should also cover shade, water, rest periods, rotation between indoor and outdoor duties, and changes to shift times where necessary. Our earlier guide to operational resilience during extreme heat covers the broader operational thinking behind this.

The principle is simple: the terrace is part of your revenue model, but it is also a workplace.

4. Málaga tourist accommodation moratorium: do not confuse hospitality demand with development permission

Since 25 July 2026, Málaga has suspended, for up to three years, certain new tourist accommodation licences in residential buildings. The municipal announcement describes restrictions affecting new hotel, hostel, apart-hotel, and tourist-apartment uses in residential areas, alongside limits on some changes of use from commercial premises to housing.

The Ayuntamiento de Málaga communication also notes that projects already submitted or already in the relevant planning process before publication may be treated differently.

For hospitality operators, this is not simply a property story. It may affect:

• The future supply of tourist accommodation around your venue;
• The assumptions behind a new restaurant or café concept;
• Lease values and development plans;
• Staff accommodation strategies;
• The feasibility of converting or expanding a building;
• The pipeline of tourism-led investment in a particular neighbourhood.

If you are an expat entrepreneur considering a premises, do not ask only, “Will this location have tourists?” Ask which uses are authorised, which uses are suspended, and whether the property’s planning status supports your intended business.

Get the planning position checked before spending money on drawings, deposits, equipment, or a brand launch.

5. Verifactu 2027: the winter job that should not be left until spring

Verifactu deserves the most attention because it reaches directly into the till, the bar, the office, and the daily close.

The confirmed dates are:

• 1 January 2027: companies and other entities subject to Corporation Tax;
• 1 July 2027: autónomos and other affected taxpayers.

The dates were confirmed through the changes set out in Real Decreto-ley 15/2025. The Spanish Tax Agency’s Verifactu guidance, updated in July 2026, explains that invoicing systems must protect the integrity, conservation, accessibility, legibility, traceability, and immutability of billing records.

For hospitality, the important point is that this is not only about the occasional full invoice. Facturas simplificadas, commonly called tickets, are also relevant when issued through an affected billing system. The system must include the required QR code on invoices and tickets, and generate the necessary billing records.

What to ask your TPV supplier

If you are buying or upgrading a TPV this winter, do not buy anything that is merely described as “modern”, “cloud-based”, or “ready for the future”.

Ask the supplier, in writing:

1. Is the system compliant with the requirements applicable from my business’s deadline?
2. Does it support the required QR code on tickets and invoices?
3. Does it preserve the integrity, immutability, and traceability of billing records?
4. Is the system intended to operate in VERI*FACTU mode, or another permitted compliant mode?
5. What will happen to existing sales history?
6. What hardware, printer, terminal, or integration changes are required?
7. What training and technical support are included?
8. What is the total cost, including updates, subscriptions, installation, and support?
9. What happens if the internet connection fails?
10. Will the supplier confirm compliance in the contract or service documentation?

The recent Hostelería Madrid guidance on preparing hospitality businesses for Verifactu makes the sensible point that the transition affects the operational system, not only the accountant. The team needs to know how tickets are issued, how corrections are handled, how cancellations are recorded, and what happens at the end of the day.

Use the quiet season to test the system with real operating scenarios:

• A split bill;
• A cancelled item;
• A corrected ticket;
• A refund;
• A takeaway order;
• A printer failure;
• A temporary loss of connection;
• A day with two tills and one closing manager.

If the system works only when the supplier is standing beside you, it is not ready.

Businesses operating in the Basque Country follow their own TicketBAI rules rather than Verifactu. For Málaga operators, however, that exception is not relevant. Your TPV decision should be made against the rules that apply to your business and tax structure.

A practical order of work

Do not try to fix everything at once. Work in sequence:

• First: confirm your legal structure, premises use, and licence position;
• Second: check noise, terrace, event, and heat procedures;
• Third: review the property and planning implications of any expansion;
• Fourth: speak to your accountant and TPV supplier about Verifactu;
• Fifth: test changes with the team before the next busy period.

That sequence matters. There is little value in buying a new till for a premises whose intended use is unclear or planning a terrace event before checking the acoustic conditions.

Winter is preparation time

Independent hospitality operators rarely have the luxury of being absent from the business. Your constant presence is often what keeps the doors open, particularly when the business is young or the team is still developing. That is a reality, not a personal failure.

The aim is not to create a magnificent compliance manual which nobody reads. It is to put a few dependable controls around the work you are already doing: clear permissions, written decisions, tested systems, and a team that knows what happens when conditions change.

Atelier Sawyer’s practical approach to systematic restaurant operations begins with that same principle. Build structure around the real business, one useful step at a time.

The quiet season is not empty space. It is the time when next summer’s problems can still be solved calmly.

Sources and further reading

• Spanish Tax Agency, Verifactu frequently asked questions
• Ayuntamiento de Málaga, communication on accommodation use and planning changes
• La Opinión de Málaga, changes to music and noise rules
• El Español, Málaga noise and licensing restrictions
• Hostelería Madrid, preparing hospitality businesses for Verifactu