Trend radar · · 4 min read · By Alexander
Trend Radar Week 44/2026: Spam pages, AI agents, data breaches
Trend Radar filters the week’s developments for freelancers and small businesses in Germany. Week 44 covers unintended user pages in Google, lower-cost AI agents for office workflows, a privacy warning for tourism businesses and current findings on digital commerce.
Google warns about unwanted spam pages on your own domain
Google expanded its user-generated spam guidance on 26 October. It now highlights pages created through sharing links that were never intended for public search. Customer portals, uploads, previews, public profiles and small web tools can all generate indexable URLs. Attackers may abuse open functions to publish links and low-value pages under a trusted domain. Google advises keeping content that is not meant for Search out of the index and monitoring anomalies in Search Console.
What does this mean for you? Check whether forms, accounts, uploads or sharing functions create public URLs. Depending on their purpose, these pages may need a login, an unguessable token, an expiry date and “noindex”. Mark links in uncontrolled content with “nofollow” or “ugc”. In Search Console, watch for sudden growth in indexed pages, unknown folders and manual actions. See /ratgeber/google-search-console-basics/ and /ratgeber/formular-spam-stoppen/.
GPT-6.1 Terra lowers the cost of computer automation
OpenAI introduced GPT-6.1 Terra on 26 October. The model combines visual understanding, computer use and writing for recurring tasks such as reading incoming invoices and entering information into business software. Standard API pricing is $1 per million input tokens and $5 per million output tokens, which OpenAI says is 50 per cent lower than GPT-5.6 Terra and GPT-6.1 Sol. For small firms, the important change is the combination of seeing, deciding and acting inside existing tools.
What does this mean for you? Start with one limited, low-risk workflow: pre-sorting documents, matching product information or preparing data for a draft. Keep approval steps for payments, contracts, publishing and customer communication. Document the data involved, review the provider and data processing terms, and test real failure cases. A faster agent without supervision only produces mistakes faster.
Privacy authority warns hotels and tourism businesses about breaches
On 14 October, the Thuringian data protection authority published a dedicated warning about data breaches in hotels and tourism. The sector processes personal data across enquiry forms, booking platforms, hotel software, payment providers, Wi-Fi and newsletters. A misdirected file, open export or compromised account can therefore expose contact details, travel dates and payment information. The warning sits just outside the seven-day window but remains highly relevant to small accommodation providers.
What does this mean for you? Map one booking from start to deletion: where data arrives, who can access it, where copies are stored and when they are removed. Enable two-factor authentication for booking portals and email, use personal accounts instead of shared logins and avoid unprotected guest lists. Assign responsibility for assessing and, where required, reporting a breach within 72 hours. See /ratgeber/datenschutzerklaerung-website/ and /ratgeber/av-vertrag/.
Digital commerce is standard, but small shops need a clear profile
Bitkom’s current Digital Commerce in Germany report shows how routine online buying has become. Ninety-six per cent bought or booked online within twelve months and 36 per cent did so at least weekly. Smartphones are the most-used shopping device at 73 per cent. At the same time, 92 per cent frequently buy through platforms, increasing the pressure from marketplaces, international providers, social commerce and AI.
What does this mean for you? Do not try to beat a marketplace by copying its range. Explain why customers should buy or enquire directly: local advice, reliable contact, clear origin, quick support or specialist expertise. The mobile journey must work without zooming, searching or unnecessary fields. Measure completed enquiries, bookings and purchases rather than visits alone. See /ratgeber/online-shop-lohnt-sich/ and /ratgeber/mobile-first-warum/.
In brief
- Google clarified on 23 October that words in URLs should continue to be separated with hyphens rather than underscores.
- Google has consolidated existing controls for search snippets and generative Search features in a clearer guide.
- Start AI automation with one process, explicit approvals and measurable quality criteria rather than full access to every system.
Frequently asked questions
How can I detect spam pages indexed under my domain?
Review page indexing and search performance in Google Search Console. Look for unknown URLs, sudden increases in page counts and folders used for user content or sharing.
Can an AI agent post invoices automatically?
It can recognise and transfer data, but begin with drafts or pre-entry. Keep human approval for accounting entries, payments and tax-relevant decisions.
What should a small accommodation business do first against data breaches?
Secure email and booking portals with two-factor authentication, use personal accounts, review data exports and document an incident response process.