Compliance reference
Is GPS tracking of employees legal?
Short answer: for a vehicle your company owns, during working hours, almost everywhere in the United States, yes. The longer answer is more interesting, because most of what is published about this is wrong, including several claims repeated by companies that sell GPS tracking software.
This is not legal advice. Punchless is a software company, not a law firm. Every statute below links to its primary source so you can read it yourself, and every claim on this page was checked against that text rather than against other articles. Laws change and facts differ. Before you roll out tracking, have your own employment counsel look at your situation. Last verified July 24, 2026.
Five things nearly every guide on this topic gets wrong
We went to the statutes expecting to confirm the standard summary. Most of it did not survive contact with the actual text.
ClaimCalifornia requires written employee consent and limits tracking to work hours.
ActuallyNeither requirement appears anywhere in Penal Code § 637.7. The statute asks for the consent of the vehicle's registered owner, lessor or lessee. Restricting tracking to shift hours is good practice and reduces exposure under California's separate constitutional privacy protections, but it is not what this statute says.
ClaimConnecticut, Delaware and New York require notice before GPS tracking employees.
ActuallyAll three statutes are about monitoring telephone calls, email and internet usage. None of them mention vehicle or location tracking. They are real notice laws, they are just not GPS laws.
ClaimMinnesota only allows tracking with the permission of the person being tracked.
ActuallyMinn. Stat. § 626A.35 keys consent to the owner of the object the device is attached to, not to the person tracked. An employer that owns the vehicle satisfies it.
ClaimIf you own the vehicle, you never need to tell anyone.
ActuallyTrue in most states, false in New Jersey, and unwise everywhere. New Jersey requires written notice regardless of who owns the vehicle. Beyond the statutes, undisclosed tracking is the fastest way to turn a productivity tool into a morale problem and a lawsuit.
ClaimThere is a federal law against tracking employees.
ActuallyThere is not. The Electronic Communications Privacy Act concerns interception of the contents of communications, and the Stored Communications Act concerns stored communications. Neither naturally reaches vehicle location data. United States v. Jones restricts government tracking and does not bind private employers.
The federal baseline
There is no federal statute that prohibits a private employer from tracking the location of its own vehicles during working hours. The two federal laws usually raised are the Electronic Communications Privacy Act, which concerns intercepting the contents of communications, and the Stored Communications Act, which concerns access to stored communications. Vehicle location data does not sit comfortably in either. We could not find a court decision squarely applying them to employer fleet tracking, so treat that as an absence of authority rather than a settled rule.
United States v. Jones is frequently cited in this conversation and is not on point. It held that installing a GPS tracker on a vehicle was a Fourth Amendment search when the government did it. The Fourth Amendment constrains the state, not your company.
That leaves the real constraints at the state level, and in one specific place, in California privacy law.
States with vehicle tracking statutes
These are the laws that actually govern putting a location tracker on a vehicle. The pattern is remarkably consistent: consent is required, and the consent the statute wants belongs to the vehicle's owner. An employer that owns or leases the vehicle supplies it by owning the vehicle. New Jersey is the exception, and it is the one to know.
Vendor round-ups also name Michigan, Oregon, Rhode Island, Tennessee, Utah and Wisconsin as having comparable vehicle-tracking statutes. We were not able to verify those against primary text, so they are deliberately left out rather than repeated. Absence from this table means unverified, not permitted.
Three laws that are not GPS laws
Connecticut, Delaware and New York appear on nearly every list of states that regulate GPS tracking. All three have genuine electronic monitoring notice laws. None of the three statutes mentions vehicles or location. They cover telephone calls, email and internet usage. If you operate in these states you should comply with them, and you should not assume they tell you anything about fleet tracking.
Personal vehicles and phones
This is the genuinely risky case. Where the employee owns the vehicle, the employee is the owner whose consent the statutes contemplate. Tracking without it can be a criminal offense rather than a civil one. If your crew uses their own vehicles or their own phones, get informed written consent, limit collection to shift hours, and take advice for your state before you start.
Off-shift tracking
Most statutes address the device rather than the schedule, so off-shift tracking is rarely what makes something illegal. It is, reliably, what makes it a lawsuit. Continuous collection is the fact pattern behind invasion-of-privacy claims and the thing that turns a crew against the system. Collect during shift hours and be able to show that is what the software does.
California, separately
Employee location data is sensitive personal information
California deserves its own note, and not for the reason usually given. Penal Code § 637.7 is comparatively permissive for employer-owned vehicles. The obligation people miss sits in the California Consumer Privacy Act as amended by the CPRA.
The exemptions that kept employees and applicants outside the CCPA became inoperative on January 1, 2023. Employees of a covered business now have consumer-style rights against their own employer. Precise geolocation, defined as locating someone within roughly 1,850 feet, is listed as sensitive personal information, which brings notice-at-collection duties and limits on use. If you operate in California and meet the CCPA thresholds, this is the obligation to take seriously.
A GPS policy template you can adapt
Written disclosure is required in New Jersey, sensible everywhere, and the single most effective thing you can do to stop tracking becoming a fight with your crew. Copy this into your handbook and replace the bracketed parts. Have counsel review it before you issue it, and make sure every sentence is true of the system you actually run. A policy that promises shift-hours-only collection while the software runs continuously is worse than no policy at all.
GPS AND LOCATION TRACKING POLICY 1. PURPOSE [Company] uses location tracking to record work hours accurately, to dispatch the nearest available technician, and to maintain records required for payroll and wage-and-hour compliance. 2. WHAT IS COLLECTED The [Company] mobile application records the location of the device assigned to you, and the times at which you arrive at and depart from registered job sites. 3. WHEN IT IS COLLECTED Location is collected only during your scheduled shift hours, and only while you are clocked in to a working shift. Collection stops when your shift ends. No location is collected on evenings, weekends, holidays or any other personal time. 4. PAUSING COLLECTION You may pause location collection at any time during a shift using the pause control in the application. [Describe any expectations around use.] 5. WHO CAN SEE IT Your location during shift hours is visible to [roles: e.g. your direct supervisor and company administrators]. It is not shared with other technicians, and it is not sold or provided to third parties for advertising. 6. HOW IT IS USED Location records are used to build draft timecards for review, to dispatch work, and to resolve disputes about hours or site visits. They are not used as the sole basis for disciplinary action without review. 7. YOUR ACCESS TO YOUR OWN DATA You may review your own location records and the timecard entries they generated at any time in the application. 8. RETENTION Location records are retained for [period] and then deleted. Approved timecard records are retained for [period] to meet payroll and wage-and-hour recordkeeping requirements. 9. QUESTIONS Direct questions about this policy to [contact]. ACKNOWLEDGMENT I have read and understood this policy. Employee name: ______________________________ Signature: __________________________ Date: ____________
Where Punchless sits in this
We built Punchless so the honest version of that policy is easy to write. Tracking is active during shift hours and stops when the shift ends. Technicians can see their own records and the timecard entries those records generated. There is a one-tap pause for use during the workday. Location data is retained for 12 months, and approved timecards for seven years to meet payroll recordkeeping expectations.
None of that is legal advice, and none of it removes your obligation to disclose. It just means the system does what a defensible policy says it does.
Common questions about GPS tracking and the law
Is GPS tracking of employees legal in the United States?+
For employer-owned vehicles during working hours, generally yes. No federal statute prohibits it, and the state statutes that govern vehicle tracking devices almost all turn on the consent of the vehicle's owner, which an employer that owns or leases the vehicle supplies itself. New Jersey is the notable exception: it requires written notice to the employee regardless of who owns the vehicle. This is general information, not legal advice.
Do I need written consent from employees before tracking them?+
Statutory consent usually runs to the vehicle's owner rather than the person driving, so in most states employee consent is not what the tracking statute asks for. New Jersey requires written notice. Separately, California treats precise geolocation as sensitive personal information under the CCPA as amended, which creates notice obligations for covered businesses. Written disclosure is worth doing everywhere regardless of whether a statute compels it.
Can I track an employee's personal vehicle or personal phone?+
That is a different question with a much less comfortable answer. Where the employee owns the vehicle, the employee is the owner whose consent the statutes contemplate, so tracking without it can be a criminal offense in states like Texas and California. If you are tracking on personal devices, get informed written consent, restrict it to shift hours, and take advice specific to your state.
Is it legal to track employees outside of working hours?+
This is where employers get into trouble. The statutes above mostly address the device rather than the schedule, but off-shift tracking is what drives invasion-of-privacy claims and what regulators find objectionable. The defensible position is to collect location only during shift hours and be able to demonstrate that is what the system does.
Does the CCPA apply to employee location data in California?+
Yes, for businesses that meet the CCPA thresholds. The employee and applicant exemptions became inoperative on January 1, 2023, so employees have consumer-style rights against their employer. Precise geolocation, defined as locating someone within about 1,850 feet, is listed as sensitive personal information, which brings notice-at-collection and limit-on-use obligations.
What should a written GPS policy contain?+
At minimum: what is collected, when collection starts and stops, who can see it, what it is used for, how long it is retained, and how an employee can see their own data. A policy that says tracking is limited to shift hours and then runs continuously is worse than no policy, so make sure the document matches what your system actually does.
Tracking your crew will not hate.
Shift hours only, a pause button that actually works, and technicians who can see their own data. Thirty days free, no credit card.