A finance company can legally put a GPS tracker on a car it finances, but only if your loan agreement clearly discloses the device and you consent to it when you sign. That consent is the line between a lawful tool the lender uses to protect its collateral and a privacy violation you can act on. State laws add their own disclosure and notice requirements, and federal regulators have gone after lenders that misuse the technology.
The Consent Rule in Your Loan Agreement
Legality starts with your paperwork. For a GPS tracker to be lawful, the contract needs a clause that tells you a device will be installed, what it does, and why the lender is using it. Vague language buried in boilerplate is not enough. The disclosure should be conspicuous and plainly written, so you understand what you’re agreeing to before you sign.
Signing a loan agreement with that disclosure is your explicit permission to install and use the device. The paperwork should spell out that the tracker is a condition of the financing and exists to protect the lender’s interest in the vehicle. Most lenders treat it the way they treat insurance requirements: baked into the deal, and refusing means you don’t get the loan.
GPS trackers show up most often in subprime auto lending. If you’re financing through a buy-here-pay-here dealership or a lender that specializes in borrowers with lower credit scores, expect a tracker in the package. Traditional banks and credit unions lending to well-qualified borrowers rarely use them.
State Disclosure and Notice Rules
Your state can require more than the contract does. A growing number of states have statutes that specifically address how and when a lender must tell you about a GPS device, and those requirements sometimes go further than the loan agreement itself.
Common state-level rules include a separate signed disclosure form on top of the clause in the main contract, minimum notice periods before a lender can remotely disable the vehicle, and restrictions on what functions the device is allowed to perform. Several states require advance warning days before a starter interrupt feature is activated. The specifics vary enough that you need to check your own state’s consumer protection statutes to know what applies to you. If your lender didn’t follow those rules, the installation could be unlawful regardless of what your contract says.
What Lenders Can Do With the Data
When a tracker is lawfully installed, the lender can use location data for purposes tied directly to managing the loan. The most obvious one is locating the vehicle for repossession after default. Instead of sending a recovery agent to search for a car, the lender pulls up its location.
If the car is reported stolen, GPS data helps both you and the lender recover it. Some lenders also use the device to send automated payment reminders or to monitor whether the vehicle stays within a geographic boundary set in the loan terms.
When a lender or its agent uses GPS data during debt collection, federal rules still apply. Under the Fair Debt Collection Practices Act, a debt collector contacting a third party to find your location cannot reveal that you owe a debt, cannot contact the same third party more than once, and must communicate only with your attorney if you have one.
Starter Interrupt and Kill Switch Limits
Many GPS trackers come paired with a starter interrupt device, sometimes called a kill switch, that lets the lender remotely prevent your car from starting. It’s a powerful tool, and it draws the most regulatory scrutiny.
The intended use is straightforward: after you miss payments and the lender gives you proper notice, the interrupt keeps the car from starting so a recovery agent can pick it up. Some states require the lender to warn you days ahead, with a final warning at least 48 hours before the car is disabled.
The CFPB has sued lenders who misused the technology. In an action against USASF Servicing, the agency alleged the company incorrectly disabled vehicles at least 7,500 times and triggered warning tones in cars more than 71,000 times during periods when borrowers were not in default or were actively communicating about upcoming payments. The CFPB further alleged USASF disabled vehicles at least 1,500 times after explicitly promising borrowers it would not do so.1Consumer Financial Protection Bureau. CFPB Sues USASF Servicing for Illegally Disabling Vehicles and for Improper Double Billing Practices Disabling a vehicle in a way that creates a safety hazard, such as when a driver is on the road or in an unsafe area, is the kind of conduct regulators treat as unfair under federal consumer financial protection law.
Uses That Cross the Line
A lawful tracker does not give the lender a blank check over your location information. Federal regulators have drawn hard lines, and crossing them exposes lenders to serious liability.
Selling your location data to third parties without informed consent is a clear violation. The FTC finalized a settlement with General Motors and OnStar in January 2026 after alleging the companies collected precise geolocation and driving behavior data from millions of vehicles through the OnStar Smart Driver feature and sold it to consumer reporting agencies without adequate notice or consent.2Federal Trade Commission. FTC Finalizes Order Settling Allegations that GM and OnStar Collected and Sold Geolocation Data Without Consumers Informed Consent The order imposed a five-year ban on GM sharing geolocation and driving behavior data with consumer reporting agencies and a 20-year requirement to obtain affirmative express consent before collecting, using, or sharing connected vehicle data.
The FTC has also made clear that geolocation data is sensitive information subject to heightened protections. In a series of enforcement actions, the agency has established that collecting, using, or disclosing precise location data can be an unfair practice when it reveals visits to places like medical clinics, places of worship, or domestic abuse shelters.3Federal Trade Commission. Cars and Consumer Data – On Unlawful Collection and Use Using GPS data to continuously monitor your daily movements for harassment is illegal. So is sharing that data with marketers or anyone without a legitimate interest tied to the loan.
Finance companies also have to protect the data they collect. Under the Gramm-Leach-Bliley Act, financial institutions must safeguard sensitive customer information. The FTC’s Safeguards Rule requires automobile dealers who extend credit or arrange financing to develop and maintain a written information security program with administrative, technical, and physical safeguards designed to protect customer data.4Federal Trade Commission. Gramm-Leach-Bliley Act That includes the location data streaming from a GPS device. Storing months of your travel history on an unsecured server is a violation, not just poor practice.
Repossession Still Has Rules
GPS tracking makes repossession faster and cheaper, but it doesn’t override the legal limits on how repossession has to happen. Even when a lender knows exactly where your car is parked, the recovery agent still has to follow the rules.
The Breach-of-Peace Limit
Under Article 9 of the Uniform Commercial Code, adopted in some form by every state, a secured creditor can repossess collateral without going to court, but only if the repossession happens without a breach of the peace.5Legal Information Institute. UCC 9-609 – Secured Partys Right to Take Possession After Default A repo agent who locates your car via GPS inside a locked garage or behind a closed gate cannot break in to take it. GPS shows the lender where the car is, but the law still bars forceful entry, confrontation, or any recovery method that disturbs the peace. If an agent crosses that line, you may have a claim for damages even if you were behind on payments.
Military Servicemember Protections
Active-duty military members get extra protection under the Servicemembers Civil Relief Act. If you signed the auto loan and made at least a deposit or first installment before entering military service, the lender cannot repossess your vehicle without a court order, regardless of what GPS shows.6Office of the Law Revision Counsel. 50 USC 3952 – Protection Under Installment Contracts for Purchase or Lease A servicemember can waive this right, but the waiver has to be in writing, conspicuous, on a separate document from the loan agreement, and signed during or after the period of military service. A waiver signed before you enter service becomes invalid once you report for duty.
Don’t Remove the Device Yourself
Removing a GPS device from a financed car when the loan requires it is a breach of contract. Most agreements treat tampering with or removing the tracker as a default event, so the lender can accelerate the entire loan balance and demand full payment immediately. If you can’t pay, that opens the door to repossession.
Some borrowers disconnect the device thinking it invades their privacy, without realizing they agreed to it as part of the financing. If you have a real concern that the tracker is being used improperly, document the problem and raise it with the lender or a consumer protection attorney rather than pulling the device out.
If You Think Your Lender Is Breaking the Rules
Start by pulling every document you signed when you financed the vehicle. Read the loan agreement, any addendums, and any separate disclosure forms. You’re looking for language that authorizes installation and use of a GPS device and spells out what the lender can do with the data.
If there’s no mention of a tracker anywhere in your paperwork, the device may not have been lawfully installed. If you do find the disclosure but believe the lender is using the data for purposes beyond what the agreement or the law allows, such as selling your location or disabling your car when you’re current on payments, put your complaint in writing to the lender first and keep a copy.
When the lender’s response doesn’t resolve the issue, file a complaint with the CFPB and consult a consumer protection attorney. An attorney can evaluate whether the lender violated your state’s disclosure requirements, breached the contract, or engaged in unfair practices under federal law. The FTC and CFPB actions above show regulators take these violations seriously, and borrowers who are being tracked or disabled illegally have real legal options.