Vehicle tracking is widely used by UK businesses to monitor company cars, vans and HGVs. GPS tracking can help businesses improve fleet efficiency, driver safety, vehicle security and compliance, but employers must also consider data protection and employee privacy.
Understanding vehicle tracking laws in the UK is essential before introducing GPS tracking across a fleet. Employers need to have a lawful basis for processing tracking data, be transparent with employees about monitoring and ensure tracking is proportionate to the business purpose.
In this guide, we explain company vehicle tracking laws in the UK, including the key data protection rules, employee rights, when GPS tracking is legal and what employers need to do to remain compliant.
Why do businesses use vehicle tracking?
Businesses use GPS vehicle tracking for legitimate operational purposes, including improving fleet efficiency, reducing fuel costs, locating vehicles, improving driver safety and supporting compliance.
However, having a legitimate business purpose does not automatically mean any form of tracking is lawful. Employers must consider how much data they collect, why they collect it, how long they keep it and whether the monitoring is proportionate.
If you're new to vehicle tracking, our Telematics 101 guide explains how telematics works and how businesses use it to manage their fleets.
What vehicles can be tracked in the UK?
Under UK vehicle tracking laws, employers can legally track most company-owned vehicles provided there is a legitimate business reason and employees have been informed about how tracking will take place.
You might use different tracking systems depending on the vehicle used. For example, you can use geofencing to set virtual boundaries for goods vehicles, and then you’ll receive an alert if they leave this area. This prevents unauthorised use and allows you to locate stolen vehicles quickly. Alongside vehicle tracking, businesses should also follow good vehicle security tips to reduce the risk of theft.
Key vehicle tracking law frameworks explained
There is no single UK law that specifically governs all vehicle tracking. Instead, businesses need to consider several areas of data protection and employment law when monitoring company vehicles.
The most important frameworks to understand are the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and guidance from the Information Commissioner's Office (ICO). Employers should also consider employees' rights to privacy under the Human Rights Act 1998.
UK GDPR and the Data Protection Act 2018
Vehicle tracking data can be personal data when it can be linked to an identifiable driver. This means businesses using GPS tracking need to comply with UK data protection law.
Before collecting vehicle tracking data, employers should:
Identify an appropriate lawful basis for processing the data.
Be clear about why vehicle tracking is necessary.
Only collect data that is relevant and proportionate to the stated purpose.
Tell employees what information is being collected and how it will be used.
Keep tracking data secure and restrict access to authorised people.
Keep the data only for as long as it is needed for its intended purpose.
For many businesses, legitimate interests may be a relevant lawful basis where vehicle tracking is necessary for a genuine business purpose and the employer can demonstrate that the benefits are not outweighed by employees' rights and freedoms. However, the appropriate lawful basis depends on the circumstances and should be assessed before monitoring begins.
ICO guidance on employee monitoring
The Information Commissioner's Office (ICO) provides specific guidance on monitoring workers, including the use of vehicle tracking.
The ICO states that employers can monitor work vehicles, but monitoring must be lawful and fair. Employers should consider whether the monitoring is necessary, proportionate and reasonably expected by employees.
Where a company vehicle is also available for private use, monitoring outside working hours is particularly important. The ICO states that employers will rarely be able to justify monitoring private use without the worker's freely given consent.
Businesses should therefore consider using privacy modes or other controls that prevent tracking during authorised personal use.
Human Rights Act 1998
The Human Rights Act 1998 protects an individual's right to respect for their private and family life. This is particularly relevant where a company vehicle can be used for personal journeys.
Employers should consider the impact that vehicle tracking could have on an employee's privacy and avoid monitoring that is excessive or unjustified.
The key principle is that tracking should be proportionate to the legitimate business purpose. If a less intrusive way of achieving the same objective is available, employers should consider whether that option would be more appropriate.
Vehicle tracking and employee rights
Employees have rights when their employer uses GPS tracking to monitor company vehicles. While businesses can generally monitor vehicles for legitimate operational purposes, employees should not be subjected to excessive or unjustified monitoring.
Employers should make sure employees understand:
Why is vehicle tracking being used?
What information does the tracking system collect?
When tracking is active.
How the information will be used.
Who will have access to the data?
How long will tracking information be retained?
What rights do they have in relation to their personal data?
Can employees refuse vehicle tracking?
Employees cannot simply assume that they can refuse all vehicle tracking. If an employer has a lawful basis for monitoring company vehicles and the monitoring is necessary, proportionate and properly communicated, tracking may be permitted without relying on employee consent.
However, employers should not assume that installing a tracker automatically gives them the right to monitor an employee at all times.
The situation is particularly serious when employees are allowed to use company vehicles privately. In these circumstances, employers should avoid tracking during authorised personal use unless there is a clear and lawful reason for doing so.
Can employers track company vehicles outside working hours?
Tracking employees outside working hours can raise significant privacy concerns. If a company vehicle is available for private use, employers should generally avoid monitoring its location during personal journeys unless there is a specific justification.
Where possible, businesses should use a privacy mode that allows tracking to be disabled during authorised personal use.
Do employees have the right to know they are being tracked?
Yes. Employers should be transparent about vehicle monitoring and explain to employees what data is collected, why it is collected and how it will be used.
Businesses should include vehicle tracking information within relevant privacy notices, policies or employee communications and ensure workers receive clear information before monitoring begins.
Is GPS tracking legal in the UK?
Yes, GPS tracking of company vehicles can be legal in the UK. However, employers must comply with data protection law and ensure that monitoring is lawful, fair, necessary and proportionate.
The legality of GPS tracking depends on factors such as:
The reason the vehicle is being tracked.
The lawful basis for processing the tracking data.
Whether employees have been properly informed.
Whether the vehicle can be used privately.
When tracking takes place.
What information is collected.
How the data is stored, accessed and retained.
A business should not assume that because a vehicle belongs to the company, it can automatically track its location at all times. The ICO advises employers to consider the least intrusive way of achieving their purpose and to balance their business interests against workers' rights and freedoms.
What data can vehicle tracking systems collect?
Depending on the system, vehicle tracking technology can collect information such as:
Vehicle location: GPS information showing where a vehicle is located or has travelled.
Driving behaviour: Information about speed, acceleration, braking and cornering.
Vehicle information: Mileage, fuel consumption and diagnostic data.
Journey information: Details such as routes, distances and journey times.
Some of this information may constitute personal data where it can be linked to an identifiable employee.
Businesses should follow the principle of data minimisation by collecting only the information they need for their stated purpose. Tracking data should also be stored securely and retained only for as long as necessary.
How to comply with vehicle tracking laws in the UK
Before introducing GPS tracking across your fleet, businesses should take the following steps.
1. Establish a clear business purpose
Start by identifying exactly why you want to track your vehicles. This could include improving driver safety, protecting vehicles, managing routes or reducing fleet costs.
The purpose should be specific and legitimate rather than simply monitoring employees because the technology is available.
2. Identify your lawful basis
You need to identify an appropriate lawful basis for processing vehicle tracking data under UK GDPR.
Legitimate interests may be appropriate in some circumstances, but businesses should consider whether tracking is necessary and proportionate and balance their interests against employees' rights and freedoms.
3. Carry out a Data Protection Impact Assessment
Consider whether a Data Protection Impact Assessment (DPIA) is required before introducing vehicle monitoring. Even where one is not mandatory, a DPIA can help identify privacy risks and determine whether the proposed monitoring is proportionate.
4. Tell employees about the tracking
Employees should receive clear information about what is being tracked, why it is being tracked, when tracking takes place and how their data will be used.
This information should be reflected in relevant privacy notices and company policies.
5. Consider private vehicle use
If employees are allowed to use company vehicles privately, make sure your tracking system does not unnecessarily monitor their personal journeys.
Where appropriate, use a privacy mode or another method of disabling tracking during authorised personal use.
6. Secure and retain tracking data appropriately
Limit access to tracking information to people who genuinely need it and ensure appropriate security measures are in place.
You should also have a clear retention policy explaining how long tracking data is kept and when it will be securely deleted.
7. Review your tracking practices regularly
Vehicle tracking systems and data protection requirements can change over time. Review your policies, privacy notices and tracking practices regularly to make sure they remain appropriate and proportionate.
Vehicle tracking is just one part of maintaining a compliant fleet. For a broader overview, see our complete guide to UK fleet compliance.
What are the consequences of unlawful vehicle tracking?
If vehicle tracking is carried out unlawfully, businesses could face complaints, regulatory action, financial penalties and reputational damage. There may also be employment disputes where monitoring has been carried out without a lawful basis or appropriate transparency.
The potential consequences will depend on the circumstances, which is why businesses should assess their data protection obligations before introducing vehicle tracking.
Ready to manage your fleet with smarter telematics?
Take control of your fleet with vehicle tracking designed to give you greater visibility, improve driver safety, and help reduce unnecessary costs.
Explore our telematics solutions and see how smarter fleet tracking can work for your business.
Frequently asked questions around vehicle tracking
Can employees refuse to have trackers fitted to company vehicles?
Employees cannot usually refuse vehicle tracking if it is required for legitimate business purposes and has been clearly communicated. Employers should explain why tracking is necessary, what information is collected and how it will be used. Where company vehicles are also used privately, additional privacy considerations may apply.
What are the consequences of illegal vehicle tracking?
Unlawful vehicle tracking could result in complaints to the Information Commissioner's Office (ICO), enforcement action under UK GDPR, financial penalties and reputational damage. Employers may also face employment disputes if tracking is carried out without a lawful basis or appropriate transparency.
Can employers track company vehicles outside working hours?
Employers should avoid tracking employees outside working hours unless there is a legitimate business reason and staff have been informed. Many vehicle tracking systems include privacy modes that disable location tracking during authorised personal use.
Do company vehicles have to display a notice that they are being tracked?
There is no legal requirement to display a notice on the vehicle itself. However, employers should clearly inform employees through company policies or privacy notices that vehicle tracking is in place and explain how the data will be used.
How long can vehicle tracking data be kept?
Vehicle tracking data should only be retained for as long as it is needed for its original purpose. Employers should have a documented retention policy and securely delete data when it is no longer required.
