Employer GPS tracking of employees is legal across most of the United States, but the laws governing it come from a scattered mix of state notification statutes, court decisions on location privacy, labor law, and industry-specific federal rules rather than a single national statute. What decides whether a given tracking program is lawful comes down to three questions: does the employer own the equipment being tracked, did the employee get clear written notice, and does the monitoring stop when the workday ends. Getting any of those wrong exposes a business to civil suits, regulatory penalties, or in a growing number of states, criminal charges.
No Single Federal Statute Covers Workplace GPS
A common misconception ties employer GPS tracking to the Electronic Communications Privacy Act. It does not apply. The ECPA, codified at 18 U.S.C. §§ 2510–2523, explicitly excludes tracking devices from its definition of “electronic communication.”1Office of the Law Revision Counsel. 18 USC 2510 – Definitions A separate section, 18 U.S.C. § 3117, defines a tracking device as “an electronic or mechanical device which permits the tracking of the movement of a person or object,” which describes exactly what a GPS unit does.2Office of the Law Revision Counsel. 18 USC 3117 – Mobile Tracking Devices So the federal wiretap framework that governs email intercepts and phone recordings has nothing to say about location monitoring.
What fills the gap is a combination of state notice laws, general privacy principles shaped by Supreme Court decisions, and industry-specific federal rules like the electronic logging mandate for commercial drivers. Employers operate under a broad standard: tracking must serve a legitimate business purpose, employees should be informed, and monitoring should not stretch beyond what the job requires. Courts weigh those factors case by case, which is why the strength of a written tracking policy often determines whether a program survives a legal challenge.
Who Owns the Equipment Matters Most
The single biggest factor in whether a tracking program is defensible is who owns the equipment being tracked. When a company provides the vehicle, laptop, or phone, it retains broad authority to monitor how that asset is used. Employees generally cannot claim the same privacy interest in a company van that they would in their own car, and courts consistently treat employer-owned property as subject to reasonable monitoring, especially when the employee has been told the device is tracked.
The picture changes when employers try to monitor personal devices. Under bring-your-own-device arrangements, the tracking software sits on hardware the employee bought and pays for. Courts view that as more intrusive and demand stronger justification. At minimum, employers running BYOD tracking need a signed agreement spelling out what is monitored, when monitoring is active, and what data the employer can see. Without one, the employer risks claims of trespass or invasion of privacy, and any data captured during personal time is likely useless in a workplace dispute.
Reimbursement does not equal consent. Paying an employee’s cell phone bill or issuing a car allowance does not give an employer tracking rights over that phone or that vehicle. Tracking authorization has to come from a separate, explicit document. Many employers in sensitive industries sidestep the whole problem by issuing dedicated work devices rather than trying to track personal ones.
Written Notice and Consent
Several states now require employers to give written notice before any GPS monitoring begins. The details vary, but the laws share a common shape: the employer has to tell the employee what data is being collected, how it will be used, and who can access it. Penalties for violations range from as little as $100 per instance in some states to $1,000 or more per employee per day where tracking continues without disclosure. More states have added these laws in recent years, and the trend runs toward stricter notice.
Whatever the local rule requires, a written GPS tracking policy is the single best legal protection an employer can hold. A workable policy covers:
- What is tracked, meaning vehicle location, phone location, or both, and whether the system logs full routes or only check-in points.
- When tracking is active, whether that means specific shift hours or only when the employee is clocked in, with a clear statement that monitoring stops outside those windows.
- Whose devices are covered, including company vehicles and phones and any personal devices under a BYOD agreement.
- How the data is stored, for how long, and what security protects it.
- Who inside or outside the company can view the data.
- How the data may be used, including whether it can factor into performance reviews, discipline, or termination.
Employees should sign an acknowledgment confirming they received the policy. A single line buried on page forty of a handbook is not enough. The notice should be a standalone document or a clearly flagged section signed separately, and the signed forms should be kept on file. Those records are what protect the employer when a dispute surfaces months or years later.
Off-Hours Tracking Is Where Employers Get Sued
Continuing to track an employee’s location after they clock out is the fastest route to a viable invasion-of-privacy suit. Courts have little patience for employers who say they forgot to turn the system off. The reasonable expectation of privacy employees hold during personal time is well established, and continuous monitoring through evenings, weekends, and vacations erases it. Damages can include compensation for emotional distress, and courts have ordered companies to stop monitoring and delete improperly collected data.
The usual technical fix is geofencing, which draws a virtual boundary around a job site or service area. When an employee’s vehicle crosses that boundary or their shift ends, the system stops recording location data on its own. It works well for field service companies, delivery fleets, and construction crews with predictable work locations, and it doubles as a timekeeping tool.
For workers whose locations are not predictable, schedule-based controls are the alternative. These configure the app to collect data only during designated shift hours and switch to a privacy mode outside them. Either way, someone has to audit tracking logs periodically to confirm no off-duty data is being captured. A policy that says tracking stops at 5:00 p.m. is worthless if the server is still logging coordinates at midnight.
Union Workplaces and the NLRA
In a unionized workplace, GPS tracking cannot be introduced unilaterally. It changes working conditions, which triggers a duty to bargain with the union before deployment. The NLRB General Counsel has issued a memo identifying GPS tracking as a technology that can interfere with employees’ rights under Section 7 of the National Labor Relations Act by “significantly impairing or negating employees’ ability to engage in protected activity—and to keep that activity confidential from their employer.”3National Labor Relations Board. NLRB General Counsel Issues Memo on Unlawful Electronic Surveillance and Automated Management Practices
The General Counsel’s proposed framework would presume a violation of the Act when an employer’s surveillance practices, viewed together, would tend to prevent a reasonable employee from engaging in protected activity. Even where the employer shows a business need that outweighs Section 7 rights, the framework would require disclosure of which technologies are in use, why, and how the data is applied. Covert monitoring would be allowed only where special circumstances justify secrecy.3National Labor Relations Board. NLRB General Counsel Issues Memo on Unlawful Electronic Surveillance and Automated Management Practices
The NLRA reaches non-union workplaces too. Employees without a union still have Section 7 rights to discuss wages, working conditions, and workplace concerns. If tracking data gets used to identify who visited a union hall, attended an organizing meeting, or met with a labor attorney, the employer can face an unfair labor practice charge whether or not a union is on the scene.
Commercial Trucking Has Its Own Rule
Commercial trucking is one industry where GPS-style tracking is not optional. Federal regulations require most commercial motor vehicle drivers to use Electronic Logging Devices to record hours of service. The ELD mandate, authorized by the MAP-21 Act and implemented through FMCSA regulations, applies to drivers required to maintain records of duty status under 49 CFR 395.8(a).4Federal Motor Carrier Safety Administration. General Information About the ELD Rule The devices have to be FMCSA-certified, mounted where the driver can see them, and able to transfer data to safety officials during inspections.5eCFR. 49 CFR Part 395 – Hours of Service of Drivers
Exemptions exist for short-haul drivers who do not maintain records of duty status, drivers who use paper logs fewer than eight days a month, drive-away-tow-away operations, and vehicles manufactured before 2000.4Federal Motor Carrier Safety Administration. General Information About the ELD Rule The ELD rule also builds in a specific protection: it prohibits driver harassment based on ELD data. An employer cannot use hours-of-service records to pressure drivers into violating rest requirements or to retaliate against drivers who report accurate hours. That is the rare instance of federal law directly restricting how employers may use GPS-derived data.
Criminal Penalties for Unauthorized Tracking
Civil suits are not the only risk. A growing number of states make it a crime to knowingly place a tracking device on a motor vehicle without the registered owner’s consent. Penalties vary widely. Some states treat the offense as a misdemeanor with up to six months in jail; others classify it as a felony carrying up to five years in prison and fines of $5,000 or more.
These statutes come into play most often when an employer attaches a device to an employee’s personal vehicle without written consent. They can also apply when a former employer fails to remove a tracker after the employee leaves, or when a manager installs a device outside the scope of a company-authorized monitoring program. A business reason does not by itself shield the employer if the vehicle owner never agreed to the tracking.
The practical rule is simple. Do not place a GPS device on any vehicle or piece of equipment you do not own without the owner’s signed, written consent. Even on company-owned vehicles, inform employees in writing before the device is installed. A one-page policy document costs almost nothing next to the price of defending a criminal charge or a civil suit.
How Courts Now View Location Data
Two Supreme Court decisions have reshaped how courts think about GPS data generally, even though both involved law enforcement rather than private employers. In United States v. Jones (2012), the Court held that physically placing a GPS device on a vehicle to monitor its movements was a search under the Fourth Amendment.6Justia. United States v. Jones, 565 US 400 (2012) Justice Sotomayor’s concurrence warned that “GPS monitoring generates a precise, comprehensive record of a person’s public movements that reflects a wealth of detail about her familial, political, professional, religious, and sexual associations.” That passage has appeared in workplace privacy filings ever since.
Six years later, Carpenter v. United States (2018) extended the analysis to cell-site location records, holding that the government’s acquisition of historical cell phone location data was also a Fourth Amendment search.7Supreme Court of the United States. Carpenter v. United States, 585 US 296 (2018) The Court said location records “hold for many Americans the privacies of life” and recognized that individuals have a reasonable expectation of privacy in the whole of their physical movements.
Neither case directly binds private employers, because the Fourth Amendment restricts government action. But the reasoning has influenced how lower courts evaluate employer tracking claims. When an employee argues that continuous monitoring invaded their privacy, courts now reach for clear Supreme Court language recognizing that comprehensive location tracking is qualitatively different from ordinary observation. Employers who track comprehensively, and especially those who track outside working hours, face a legal environment where the expectation of location privacy is stronger than it was a decade ago.