The short answer
Yes — in the UK it is generally legal for a business to use GPS tracking on company vehicles and staff, provided you have a genuine business reason, you tell people what you track and why, you track no more than you need, and you handle the data under UK GDPR. What usually gets businesses into trouble isn’t tracking itself; it’s tracking secretly, or tracking people in their own time.
Not legal advice. This guide explains UK law in general terms, as at the date shown. The ICO’s guidance on monitoring workers was under review following the Data (Use and Access) Act 2025 when this was written — check the ICO for the current position, and take advice for your own circumstances.
Is it legal to put a GPS tracker on a company vehicle?
A company can generally track its own vehicles. But a vehicle is almost always driven by a person, and a vehicle’s location tells you where that person is — so the location data is usually personal data, and UK data protection law applies. That means you need:
- A lawful basis. For most businesses this is legitimate interests — for example safety, security, scheduling or responding to customers. The ICO points out that consent is often the wrong basis at work, because staff may feel they have no real choice.
- Transparency. The ICO says employers must tell workers about monitoring in a way that is easy to understand: what is monitored, why, and how.
- Proportionality. Pick the least intrusive way to achieve your purpose, and don’t collect more than you need or keep it longer than you need.
Is GPS tracking legal for fleet businesses?
Yes, and it is common — couriers, trades, logistics and field-service firms use it every day. The same rules apply at fleet scale, plus a few practical points that matter more with a fleet:
- Private use. If staff may use a vehicle privately (evenings, weekends), tracking those journeys is much harder to justify. Allow tracking to be switched off outside working time, or don’t look at private trips.
- Who can see it. Limit access to the people who need it, such as dispatchers and managers.
- How long you keep it. Set a retention period and stick to it. (TrackLink deletes route history automatically after 30 days as standard.)
Covert tracking: the line not to cross
The ICO’s position is that covert monitoring is unlikely to be justified in normal circumstances. The narrow exception is a specific investigation into suspected criminal activity or gross misconduct — authorised at a senior level, time-limited and assessed first. Secretly tracking staff “to see what they get up to” doesn’t meet that bar.
GPS tracking compliance checklist (UK)
- Write down why you are tracking and why a less intrusive option wouldn’t do.
- Carry out a data protection impact assessment (DPIA). The ICO says you should do one for monitoring even when it is not strictly required.
- Write a short tracking policy and give it to staff before you start.
- Update your privacy notice for employees.
- Decide what happens outside working hours and on private journeys.
- Limit access to those who need it.
- Set a retention period and make sure data is actually deleted.
- Be ready for subject access requests — staff can ask for the tracking data you hold on them.
This checklist replaces the US-style “compliance checklist by state”: in the UK the same data protection law applies across England, Scotland, Wales and Northern Ireland.
How TrackLink is designed to help
- Only the person holding the phone can switch their tracking on or off — there is no remote switch.
- A visible notification shows whenever tracking is running, so it is never covert.
- Route history is deleted automatically after 30 days.
- Data is stored in London and walled off per organisation.
You remain responsible for using it lawfully — the tool can make transparency easy, but the policy and the decisions are yours. The ICO’s guidance on monitoring workers is the place to check current expectations.
Common questions
Do I need my employees' consent to track company vehicles?
Usually not — and consent is often the wrong lawful basis at work, because staff may not feel free to refuse. Most employers rely on legitimate interests, which still requires you to tell staff about the tracking and keep it proportionate.
Can I track a company vehicle outside working hours?
Tracking private use is much harder to justify. Many employers let staff switch tracking off, or simply don't record, outside working hours.
Do I need to tell staff where the tracker is?
You need to tell staff that tracking happens, what it records and why. Covert tracking is only justifiable in narrow circumstances, such as investigating suspected crime.