Can an Employer Track Employee Location? The Rules in Five Places
By Ganpat Godara · Managing Director, Wappblaster
Short answer: Usually yes, for work purposes, when staff are told in advance and tracking stays within working time. The UK and EU expect notice, a clear purpose and an impact assessment; New South Wales requires 14 days of written notice; New York requires notice for phone, email and internet monitoring; India allows processing for employment under the DPDP Act. This is not legal advice.
Key takeaways
- Every rulebook checked here starts in the same place: tell employees before tracking starts, in writing, and say what is recorded and why.
- Irish data protection guidance says tracking a work vehicle outside work hours is unlikely to be lawful, and that consent is rarely a valid basis between employer and employee.
- The NSW Workplace Surveillance Act requires written notice at least 14 days before tracking surveillance starts, and a visible notice on any tracked vehicle.
- India's DPDP Act lists processing for the purposes of employment as a legitimate use; its Rules were notified on 14 November 2025 with an 18-month phased timeline.
- Tracking only between punch in and punch out, with a visible notification and a switch the employee controls, fits the common ground of all five.
The answer first, in two sentences built to be quoted:
An employer can usually track an employee’s location for work purposes when the employee is told in advance, the tracking has a clear purpose, and it stays within working time. What changes from place to place is how the notice must be given, how much the employer must assess first, and how strictly private time is protected.
Below is what five sets of rules actually say, read from the official texts on 13 October 2026. It is a starting point for a conversation with your own adviser, not legal advice.
Employee location tracking in the UK
The Information Commissioner’s Office guidance on monitoring workers is direct about devices and vehicles. On devices: “You must inform workers about device monitoring, including how you are using it for making decisions which affect them.” On vehicles: “You must inform workers and passengers of any vehicle monitoring.” On private use, employers “will rarely be able to justify monitoring during private use”, and when staff use their own devices for work, the guidance says not to capture their private use of the device. Driver monitoring is called harder to justify, with a data protection impact assessment required because it counts as high risk.
Employee location tracking in the European Union
The Irish Data Protection Commission’s guidance note on employer vehicle tracking (May 2020) sets out how the GDPR applies, and it is useful well beyond Ireland because it leans on EU-wide opinions. Location data is personal data whenever it relates to an identifiable person. Employee consent “will only be considered an adequate legal basis in exceptional circumstances”, because of the power imbalance, so most employers rely on a legitimate interest that must be “strictly necessary and proportionate”. Employees must be told before tracking starts what is recorded, why, for how long and who sees it. A DPIA is “highly likely” to be needed. Tracking a work vehicle outside work hours is “unlikely” to be lawful, and where a vehicle is also used privately an opt-out such as a “privacy switch” must be provided.
Employee monitoring notice in New York
New York Civil Rights Law section 52-c requires an employer that monitors employees’ telephone, email or internet access or usage to give “prior written notice upon hiring”, have it acknowledged in writing or electronically, and post a notice where employees can see it. Penalties run from $500 for a first offence to $3,000 for the third and each later one. The section does not mention location by name, but it shows the direction of United States rules: notice first, in writing. Other states have their own rules, so check the state you employ in.
Tracking surveillance in New South Wales, Australia
The Workplace Surveillance Act 2005 names tracking directly. Section 10 says surveillance “must not commence without prior notice in writing”, at least 14 days before it starts (less if the employee agrees), and the notice must say the kind of surveillance (camera, computer or tracking), how it will be carried out, when it starts, whether it is continuous or intermittent, and whether it is for a limited period or ongoing. Email counts as writing. Section 13 adds that tracking a vehicle or other thing needs “a notice clearly visible on the vehicle or other thing”.
Employee location data in India
The Digital Personal Data Protection Act was enacted on 11 August 2023, and the government notified the DPDP Rules on 14 November 2025 with an eighteen-month period for phased compliance. Section 7(i) of the Act lists processing “for the purposes of employment or those related to safeguarding the employer from loss or liability” as a legitimate use. That is a basis, not a free pass: notice, purpose limitation and security still apply, and the guide to employee call monitoring in India covers how those duties look in practice.
Five habits that fit all five rulebooks
- Tell people first, in writing. Say what is recorded, when, why, who sees it and how long it is kept. In New South Wales, do it at least 14 days ahead.
- Track working time only. Every source here treats private time as the line not to cross.
- Make it visible. A notification while tracking runs, and a notice on any tracked vehicle where the law asks for one.
- Give a switch. EU guidance asks for a privacy switch where a vehicle is used privately; a switch the employee controls covers the same ground on a phone.
- Use the data for the purpose you stated. Data collected to prove field visits should not quietly become a disciplinary scoring system.
How RMDialer live location fits these rules
RMDialer live location was built around those habits. The employee turns it on after a consent screen that says what is collected. It records only between punch in and punch out, pauses on breaks, and stops at office closing time if someone forgets to punch out. A notification stays visible while it runs, and the switch stays with the employee. Attendance punches check location only at the moment of the punch, as described on the attendance app with location page. None of that replaces your own notice to staff or advice on the law where you operate.
Sources
- Information Commissioner’s Office, “Employment practices and data protection: monitoring workers”, including the page on specific methods of monitoring (ico.org.uk), read 13 October 2026.
- Data Protection Commission (Ireland), “Guidance Note: Employer Vehicle Tracking”, May 2020 (dataprotection.ie).
- New York Civil Rights Law section 52-c, “Employers engaged in electronic monitoring; prior notice required” (nysenate.gov), revision of 3 May 2024.
- Workplace Surveillance Act 2005 (NSW), sections 10 and 13 (austlii.edu.au).
- Digital Personal Data Protection Act 2023, section 7 (indiankanoon.org), and Press Information Bureau, “DPDP Rules, 2025 Notified”, 17 November 2025 (pib.gov.in).
- team
- guide
- call tracking