Short-Term Rental Laws by State: The Complete 2026 Guide

If you are buying, operating, or inheriting a short-term rental in 2026, the single most important thing to understand is that there is no federal short-term rental law. STR regulation is decided at two levels: the state legislature, which decides whether cities are allowed to regulate at all, and the local government, which writes the rules that actually govern your unit. Get either one wrong and the consequences range from five-figure fines to outright revocation of your permit. This guide walks through how the two layers interact in 2026, which states preempt local control, which give cities a free hand, and the specific permit, tax, and platform rules that tend to show up in the cities with the largest STR markets.

The state-by-state patchwork is the core problem

There is no single national framework. Instead, there are roughly three buckets of states: preemption states, where the legislature has limited what cities can do; home-rule states, where cities have near-total authority to regulate or ban STRs; and silent states, where there is no state STR law and local ordinances fill the vacuum. The bucket your property sits in dictates everything downstream — whether a city can cap nights, require primary residency, ban STRs in single-family zones, or force platforms to verify registration. Two cities in different states with identical populations and tourism profiles can have completely different rules simply because of what their state legislature decided a decade ago.

State-level preemption: Florida, Arizona, and Tennessee

Florida is the most-cited preemption state. Under Florida Statute §509.032(7)(b), cities and counties cannot prohibit vacation rentals and cannot regulate the duration or frequency of stays, unless they had an ordinance in place by June 1, 2011, in which case it is grandfathered. That grandfather clause is why cities like Miami Beach, Fort Lauderdale, and Sanibel can still run strict STR zoning maps while a neighbor city cannot. Florida cities can still require registration, inspections, noise compliance, a 24/7 responsible party, and collect the local tourist development tax, but they cannot ban the use itself.

Arizona went further with SB 1350 in 2016, codified at Ariz. Rev. Stat. §9-500.39. Arizona cities may not prohibit vacation rentals or short-term rentals, and may not restrict them based on classification, use, or occupancy. Cities can regulate for health and safety, zoning-neutral nuisance rules, and emergency contact requirements, with civil penalties up to $1,000 per 30-day period for missing contact info. SB 1168 in 2022 gave cities slightly more teeth — limited permit and licensing authority, sex-offender screening for guests, and denial of permits after repeated verified violations — but the core prohibition on banning STRs remains.

Tennessee preempts local control under the Short-Term Rental Unit Act, Tenn. Code §13-7-606, which prevents any city or county ordinance from prohibiting pre-existing STR uses. Cities that want to regulate must do so through their general zoning and nuisance authority without banning the use outright. Other preemption or partial-preemption states include Texas (through judicial decisions limiting city bans in residential zones), Indiana (HEA 1035, with carve-outs), and several others that allow regulation but not prohibition.

Home-rule states: California, Colorado, New York, Oregon, Massachusetts, Washington

On the other end of the spectrum, a large group of states explicitly leaves STR regulation to local governments. California grants cities broad police-power authority to regulate or prohibit STRs entirely. That is why San Francisco can impose a 90-day cap on unhosted rentals while Los Angeles runs its Home Sharing Ordinance and Santa Monica can effectively ban non-primary-residence STRs. Colorado takes the same approach — Denver requires primary-residence-only licensing, while mountain towns like Breckenridge, Telluride, and Vail run license caps and density limits that would be illegal in Arizona.

New York, Oregon, Massachusetts, and Washington follow similar home-rule models. Oregon cities like Portland have run STR permit programs since 2014; Washington leaves it to cities like Seattle, which caps operators at two units and requires primary residency for one of them. Massachusetts state law adds a registration layer and the 5.7% state excise tax, but cities like Boston, Cambridge, and Provincetown write their own residency and zoning rules on top. If you operate in a home-rule state, the state STR law matters very little — the city code is everything.

Permit and registration regimes

Almost every city that regulates STRs starts with a permit or registration requirement. The common pattern is an annual permit, fees in the $150 to $1,000 range, a safety inspection, proof of insurance, a local responsible-party contact within a defined drive time, and a separate transient-occupancy tax certificate. Austin requires both a Short-Term Rental License and a hotel occupancy tax account. Denver issues a Short-Term Rental Business License that must be renewed annually and tied to the host's primary residence. Seattle requires an operator's license plus a regulatory license per unit. Charleston, SC runs one of the most restrictive regimes in the country, with permits limited to primary residences in defined historic and accommodations overlay zones, and a hard cap on the total number of permits issued.

The non-obvious trap in permit regimes is the renewal timeline. Many cities require renewal 30 to 60 days before expiration, and a lapse — even by a day — triggers re-inspection and sometimes reapplication under current zoning, which may have changed since original issuance. A unit that was grandfathered under a 2019 ordinance can lose its status if the permit lapses in 2026.

Occupancy taxes: state TOT, local bed tax, platform collection

Tax structure is the second core compliance layer. Most states impose a state-level transient occupancy or sales-and-use tax on stays under 30 days, typically 5% to 15%. On top of that, counties and cities layer their own tourist development, convention, or bed taxes. A stay in Miami Beach can carry Florida's 6% sales tax, the 1% Miami-Dade surtax, the 3% Miami-Dade tourist development tax, and the 4% Miami Beach resort tax — a combined rate over 14%.

Platform collection agreements have simplified — but not eliminated — compliance. Airbnb and VRBO now collect and remit state-level taxes automatically in all 50 states and most counties. Local bed taxes and city-level TOT are inconsistent. In some jurisdictions the platform collects; in others the host is still personally liable for filing. The rule of thumb: if your city does not have a published remittance agreement with Airbnb and VRBO, assume you are responsible. Failure to remit local taxes is one of the most common causes of permit revocation and can expose hosts to back-tax assessments going back three to seven years.

Platform accountability laws: New York, New Orleans, San Francisco

The most aggressive regulatory trend since 2018 has been shifting enforcement burden from hosts to platforms. New York City's Local Law 18 of 2022, which took effect September 5, 2023, is the model. LL18 requires every host to register with the Mayor's Office of Special Enforcement, and prohibits Airbnb, VRBO, Booking.com, and any booking service from processing a reservation under 30 nights unless the platform has verified an active city registration through the city's API in real time. The effect was immediate and dramatic: registered listings fell from over 38,000 before enforcement to roughly 3,000 within 18 months. New Orleans runs a similar platform-verification model, requiring permit numbers on every listing and fining platforms that process unpermitted bookings. San Francisco has required registration-number display on listings since 2017 and fines platforms that fail to de-list non-compliant units. These laws are far more effective than host-side fines because platforms have a permanent, traceable business address and a regulatory incentive to comply.

Key restrictions cities use

Within the permit/tax/platform framework, cities deploy a handful of substantive restrictions that determine whether your unit is actually viable. The five most common: primary-residence-only requirements (host must live in the unit 180+ days per year), as in Portland, Denver, San Francisco's unhosted rentals, and New Orleans in most zones; night caps, typically 30, 90, or 180 unhosted nights per year, with San Francisco's 90-night unhosted cap being the best-known; density caps, limiting STRs to a percentage of units per block or building, common in Charleston and Savannah; zoning-by-right restrictions, permitting STRs only in specific overlay districts (New Orleans bans them in most residential zones entirely); and HOA or condo preemption clauses, which most state STR statutes leave untouched — meaning your HOA can ban STRs even if your city allows them.

Nashville illustrates the model well. Metro Nashville issues two permit classes: owner-occupied permits (where the host lives on-site) and non-owner-occupied permits. Non-owner-occupied permits are now only issued in commercially zoned districts — the city effectively banned investment-grade STRs in single-family residential zones for any new applicant after 2019.

Insurance requirements

A trend that accelerated through 2024 and 2025 is mandatory liability insurance. A growing number of cities now require $1,000,000 in general liability coverage specifically endorsed for short-term rental use, with the city named as certificate holder. Denver, Austin, Seattle, and Charleston all require proof at permit application and renewal. Standard homeowners and landlord policies typically exclude commercial/transient use, so hosts need a commercial STR policy or a rider. Airbnb's AirCover and VRBO's liability coverage are often argued to satisfy the requirement, but several cities have explicitly rejected them as substitutes because they do not issue a traditional certificate of insurance.

Enforcement: fines, revocation, platform data

Enforcement has gotten sharper. Typical first-offense fines run $500 to $1,500; repeat violations escalate to $5,000 to $10,000 per incident, and some cities allow daily fines for continued non-compliance. Permit revocation is increasingly automatic after two or three violations — Austin, Denver, and Nashville all use three-strike frameworks. The biggest change is data access: platforms now routinely share host, address, and booking data with city enforcement under subpoena or, in platform-accountability jurisdictions, under standing agreements. The era of anonymous STR operation is over.

How to check your specific city

State law tells you what cities can and cannot do. Your city code tells you what actually applies to your unit. Before listing a property, you need to answer six questions: Is a permit or registration required, and what is the fee? Is primary residency required? Is there a night cap? What zones allow STRs? What is the combined tax rate and who collects? Is insurance required, and at what limit? CityRuleLookup maintains a short-term rentals page for every city we cover, pulling together the permit rules, occupancy caps, tax rates, and enforcement contacts. If you are operating or considering a rental in Austin, San Francisco, New Orleans, Nashville, Miami, New York, Los Angeles, Denver, Seattle, or Charleston, start there — and then confirm with the city's own code before you list.