GDPR & Vehicle Tracking UK 2026: Laws, Employee Rights, Policies & Compliance Quick answer
Yes, vehicle tracking is legal in the UK, but businesses must comply with UK GDPR, the Data Protection Act 2018 and ICO guidance on monitoring workers.
Vehicle tracking data can count as personal data if it identifies a driver or worker, and can include:
live GPS location
journey history
routes
timestamps
mileage
speed
harsh braking
idling
driver behaviour
vehicle usage
private journey information
dashcam footage, where used
Employers can usually use vehicle tracking for legitimate business purposes such as fleet safety, route planning, theft prevention, compliance, maintenance, customer service, proof of delivery, working time records and reducing fuel costs.
However, tracking must be fair, lawful, transparent and proportionate.
That means your business should:
tell employees tracking is being used
explain what data is collected
explain why tracking is needed
choose a lawful basis
avoid unnecessary or excessive monitoring
avoid tracking private use unless clearly justified
use privacy mode where vehicles are used privately
keep data secure
limit access to tracking data
avoid keeping data longer than needed
document decisions
carry out a DPIA where tracking is high risk
The key rule is simple: you can track company vehicles, but you must not secretly or excessively monitor employees.
Compare GDPR-friendly vehicle tracking systems before choosing a provider.
Free quotes • No obligation • Compare UK vehicle tracking providers
Compare GDPR-friendly vehicle tracking systems The right vehicle tracking system should help your business improve fleet visibility without creating unnecessary employee privacy risks.
Compare systems with:
driver privacy mode
working-hours tracking controls
role-based access
secure data storage
clear reporting tools
route history controls
driver behaviour reports
vehicle theft alerts
maintenance alerts
audit logs
data export tools
GDPR support materials
configurable retention settings
user permissions
app-based driver controls
Contents
Understanding GDPR and Its Relevance
A Guide for Employers
Key GDPR Principles Relevant to Vehicle Tracking
Choosing the Right Vehicle Tracking System for Your Fleet
How do we work?
Transparent, impartial, and data‑driven reviews made by a team of expert humans, never AI generated – here’s exactly how Compare Your Business Costs helps you find the best deals from trusted UK providers: click here
Authored by: Ally Cox (Business Technology & B2B Services Specialist 10+ Years’ Experience)
Reviewed by: James Ward (Telecoms Specialist, 12+ Years Experience)
Last Updated: August 2026
Key Takeaways
Vehicle tracking is legal in the UK if it is fair, lawful, transparent and proportionate.
GPS location data can be personal data under UK GDPR.
Employers should tell staff what is tracked, why it is tracked and how the data is used.
Consent is not always the best lawful basis for employee tracking because of the imbalance between employer and worker.
Legitimate interests or legal obligation may be more suitable, depending on the purpose.
Covert vehicle tracking is high risk and only likely to be justified in very limited circumstances.
ICO guidance says employers will rarely be able to justify monitoring during private vehicle use.
Mixed-use vehicles should have privacy controls, such as driver privacy mode or time-based tracking rules.
Employers should have a written vehicle tracking policy.
A Data Protection Impact Assessment may be needed before introducing vehicle tracking.
The higher maximum fine under UK GDPR is £17.5 million or 4% of worldwide annual turnover, whichever is higher.
What Is UK GDPR and Why Does It Matter? UK GDPR is the UK’s data protection framework, based on the original EU GDPR and enforced by the Information Commissioner’s Office (ICO), so for vehicle tracking, this means:
GPS location data = personal data
Driver behaviour data = personal data
Journey times and routes = personal data
If your business collects this data, you are legally responsible for protecting
Understanding GDPR and Its Relevance GDPR was introduced by the EU to protect individuals’ personal data, and although the UK left the EU, the core regulation was retained as UK GDPR .
What does this mean for your business? Well, this means any business that tracks vehicles and collects personal data must comply with the law. Location data, driving behaviour, and timestamps are all classed as personal information .
Failure to comply could lead to hefty fines (up to £17.5 million or 4% of annual turnover … whichever is greater).
🔗 Useful reads:
Does vehicle tracking count as personal data? Yes, vehicle tracking data can be personal data if it identifies, or can reasonably be linked to, a person.
This can include:
Tracking data
Why it may be personal data
Live vehicle location
Can show where a driver is
Journey history
Can show routes and routines
Start and finish times
Can show working patterns
Mileage
Driver behaviour
Can profile driving style
Speeding alerts
Can be linked to performance
Harsh braking
Can be linked to behaviour
Idling time
Can be used to assess productivity
Private journeys
Dashcam footage
Can identify workers and others
Lawful basis for vehicle tracking Businesses need a lawful basis under UK GDPR before processing personal data through vehicle tracking.
Common lawful bases can include:
Lawful basis When it may apply
Legitimate interests
Fleet safety, theft prevention, route planning, efficiency or customer service
Legal obligation
Where tracking is needed to meet a legal or regulatory duty
Contract
Less common for worker monitoring and should be considered carefully
Consent
Usually difficult in employment settings because consent may not be freely given
Consent is often not the best basis for employee monitoring because workers may feel they cannot freely refuse, so, for many fleet tracking systems, legitimate interests is often considered, but this must be balanced against employee privacy rights.
You should document your reasoning and show why tracking is necessary and proportionate.
Is Vehicle Tracking Legal in the UK? Yes, vehicle tracking is legal in the UK.
Businesses can use vehicle tracking systems for legitimate reasons, such as:
protecting vehicles from theft
improving driver safety
reducing fuel costs
planning routes
checking job locations
monitoring delivery progress
improving customer service
managing maintenance
recording mileage
supporting insurance requirements
meeting legal or regulatory obligations
managing fleet productivity
However, employers must use tracking fairly and they should not monitor employees in a way that is excessive, hidden, unclear or unrelated to a genuine business purpose.
The question is not simply “can we track vehicles?”
The better question is: Is the tracking fair, necessary, transparent and proportionate?
GDPR Rules for Vehicle Tracking (UK) We’ve made you a list! Here are the seven core GDPR principles every UK business must follow when using vehicle trackers:
Lawfulness, fairness & transparency -employees must know what’s being tracked and why.Purpose limitation -data must only be used for specific, agreed purposes.Data minimisation – collect only what you need (e.g. don’t log private journeys unnecessarily).Accuracy – data must be correct and updated regularly.Storage limitation – personal data should be deleted when no longer required ( like after an employee leaves).Integrity & confidentiality – use encryption and secure systems to protect data.Accountability – employers must prove compliance with records, audits, and Data Protection Impact Assessments (DPIAs).
Do employees need to consent to vehicle tracking? Not always.
Employers do not always need employee consent to use vehicle tracking… However
In many employment contexts, consent can be problematic because of the imbalance of power between employer and worker.
Instead, employers often rely on legitimate interests, legal obligation or another appropriate basis, depending on why tracking is used – so, even if consent is not required, transparency is still required.
You should know:
tracking is in use
what data is collected
why it is collected
when tracking happens
who can access the data
how long data is kept
whether data may be used for disciplinary purposes
what rights they have
Can employers track company vehicles outside working hours? Usually, employers should avoid tracking private use, and this is especially important if employees are allowed to use company vehicles for personal journeys.
ICO guidance says that where workers are allowed to use work vehicles privately, employers will rarely be able to justify monitoring during private use.
Good practice includes:
driver privacy mode
off-duty tracking controls
time-based tracking rules
separate business/private mileage settings
clear employee guidance
limited access to historic location data
only tracking outside hours for security or theft reasons where justified
Covert vehicle tracking: is it allowed? Covert tracking means monitoring someone without telling them.
This is high risk and should not be used as a normal fleet management practice, and businesses should take legal or data protection advice before using covert monitoring.
For routine fleet management, employers should be open and transparent.
GDPR principles for vehicle tracking UK GDPR is built around core data protection principles.
For vehicle tracking, these principles mean:
Principle
What it means for vehicle tracking
Lawfulness, fairness and transparency
Tell drivers what is tracked and why
Purpose limitation
Use data only for clear business purposes
Data minimisation
Do not collect more tracking data than needed
Accuracy
Keep driver and vehicle records accurate
Storage limitation
Do not keep tracking data longer than necessary
Integrity and confidentiality
Protect tracking data with secure systems
Accountability
Keep records showing how you comply
What should a vehicle tracking policy include? Every employer using vehicle tracking should have a written policy and a good vehicle tracking policy should explain:
why tracking is used
which vehicles are tracked
which workers may be affected
what data is collected
when tracking is active
whether private use is monitored
how privacy mode works
who can access tracking data
how data will be used
whether data may be used for performance or disciplinary issues
how long data is kept
how data is secured
whether data is shared with insurers, clients or third parties
employee rights
how employees can raise concerns
who is responsible for the system
how often the policy is reviewed
The policy should be written clearly and shared before tracking starts.
Vehicle tracking DPIA: do you need one? A Data Protection Impact Assessment, or DPIA, helps identify and reduce privacy risks and can be needed where vehicle tracking is likely to create a high risk to workers’ rights and freedoms.
This is more likely if tracking involves:
live location monitoring
driver behaviour scoring
monitoring outside working hours
mixed business and personal vehicle use
dashcams
audio recording
automated performance decisions
disciplinary use
large-scale fleet monitoring
high-risk workers or locations
A DPIA should consider:
why tracking is needed
whether less intrusive options are available
what data is collected
who has access
how long data is kept
how risks are reduced
how workers are informed
what privacy controls are available
ICO guidance says organisations should consider whether less intrusive methods could achieve the same purpose and document this assessment as part of a DPIA.
Common GDPR Mistakes to Avoid
❌ Tracking employees without informing them
❌ Monitoring outside working hours unnecessarily
❌ Collecting excessive data
❌ Failing to secure data properly
❌ Not having a written policy
❌ Keeping data longer than needed
Choosing a GDPR-friendly vehicle tracking system When comparing vehicle tracking providers, look for features that help you manage compliance.
Feature Why it matters
Driver privacy mode
Helps avoid tracking private journeys
Working-hours rules
Limits tracking to business use
Role-based access
Prevents unnecessary staff access
Audit logs
Shows who viewed or changed tracking data
Data retention settings
Helps avoid keeping data too long
Secure portal
Protects location and driver data
Two-factor authentication
Reduces account access risk
Driver app
Can improve transparency and control
Vehicle theft mode
Separates security tracking from routine monitoring
Custom reports
Reduces excessive data downloads
Data export tools
Supports access requests and audits
Clear processor terms
Explains provider responsibilities
Support documentation
Helps with policy and rollout
Employee rights and vehicle tracking Employees and workers have data protection rights.
Depending on the situation, they may have the right to:
be informed about tracking
access personal data held about them
ask for inaccurate data to be corrected
object to processing
ask for data to be erased in some circumstances
restrict processing in some circumstances
understand automated decision-making, if used
raise concerns with the employer
complain to the ICO
Final Thoughts Today, you really can’t afford to ignore data protection laws when it comes to vehicle tracking. GDPR compliance is not only a legal requirement but also a way to build trust, fairness, and transparency with employees.
By adopting clear policies, choosing the right tracking tools, and staying up to date with ICO guidance , your business can benefit from the efficiencies of vehicle tracking without crossing any legal boundaries.
Compare GDPR-Compliant Tracking Systems
Save up to 40% on vehicle tracking costs
Compare UK providers with privacy-friendly features
Get free, no-obligation quotes
👉 Compare vehicle tracking systems now
FAQs: GDPR & Vehicle Tracking Is vehicle tracking legal in the UK?
Yes. Vehicle tracking is legal in the UK if the business complies with UK GDPR, the Data Protection Act 2018 and data protection rules on worker monitoring.
Is GPS tracking personal data?
Yes, GPS tracking data can be personal data if it identifies, or can be linked to, an individual driver or worker.
Do employees need to consent to vehicle tracking?
Not always. Employers need a lawful basis, but consent is often not the best option in employment settings. Employees must still be clearly informed about tracking.
Can my employer track my company van?
Yes, if the tracking is lawful, fair, transparent and proportionate. The employer should explain why tracking is used and what data is collected.
Can employers track vehicles outside working hours?
Usually not unless there is a strong reason. If workers can use vehicles privately, ICO guidance says employers will rarely be able to justify monitoring during private use.
Can an employer secretly track a vehicle?
Covert tracking is high risk and should not be used for routine fleet management. It may only be justifiable in very limited circumstances.
What should a vehicle tracking policy include?
A policy should explain the purpose of tracking, data collected, when tracking is active, private-use rules, who can access data, retention periods, employee rights and security measures.
Do businesses need a DPIA for vehicle tracking?
A DPIA may be needed where tracking is likely to be high risk, such as live monitoring, driver scoring, private-use vehicles, dashcams or large-scale worker monitoring.
How long can vehicle tracking data be kept?
There is no single fixed period for every business. UK GDPR says personal data should not be kept longer than necessary for the purpose it was collected.
Can vehicle tracking data be used for disciplinary action?
Possibly, but employees should be told in advance if tracking data may be used for disciplinary purposes. The use must be fair, proportionate and consistent with the policy.
Can vehicle tracking reduce fuel costs?
Yes. Vehicle tracking can help identify inefficient routes, idling, unauthorised mileage and driving behaviour that increases fuel use.
What features help with GDPR-compliant vehicle tracking?
Useful features include privacy mode, working-hours rules, role-based access, secure portals, audit logs, retention controls, driver apps and clear reporting settings.
What are the penalties for getting GDPR wrong?
The higher maximum UK GDPR fine is £17.5 million or 4% of worldwide annual turnover, whichever is higher.
What is the best vehicle tracking system for GDPR?
The best system is one that gives your business the tracking data it needs while offering privacy controls, access controls, secure storage, data retention settings and clear reporting.
Related Vehicle Tracking Guides & Resources Vehicle Tracking Providers UK
Fleet & Tracking Solutions
Compliance & Regulations
Help & FAQs
Compare Vehicle Tracking Systems Now
✔ Reduce fuel costs and improve efficiency
✔ Monitor vehicles in real time
✔ Free, no-obligation quotes
👉 Compare Vehicle Tracking Deals
Hi, I’m Ally Cox , a senior copywriter and blogger at CompareYourBusinessCosts.co.uk, the UK’s trusted platform for comparing business services.over a decade of experience in the B2B sector, I specialise in simplifying complex topics like leased lines, VoIP, business energy, HR and payroll solutions, accounting software, and EPOS systems .HR, copywriting, and business operations- from clocking-in systems to card machines and office technology .informed, confident decisions when choosing products and services that improve efficiency and save money.
