An employee GPS tracking consent form is the written record of an employee’s prior agreement to let an employer monitor location data through a company vehicle, a dedicated tracking device, or an app on a phone. Federal law allows that monitoring when the tracked person consents in advance, so the form is what keeps the practice on the right side of the Electronic Communications Privacy Act. A form that actually protects the employer, though, does more than collect a signature: it names the devices, defines the hours, limits who sees the data, and spells out what happens if the employee says no.
Why a Signed Form Matters
The Electronic Communications Privacy Act broadly prohibits intercepting wire, oral, or electronic communications, but it carves out an exception when one party has given prior consent. The statute permits a person “not acting under color of law” to intercept a communication “where one of the parties to the communication has given prior consent to such interception,” so long as the interception isn’t for a criminal or tortious purpose.1Office of the Law Revision Counsel. 18 U.S.C. 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited Without documented prior consent, GPS monitoring can be treated as an unauthorized interception, with both criminal penalties and civil liability under the same statute.
The Federal Trade Commission adds a second layer. Under Section 5 of the FTC Act, the agency pursues businesses that collect personal data and then mishandle it or mislead people about how it’s used.2Federal Trade Commission. Privacy and Security Enforcement The promises made inside the consent form are enforceable. Telling employees that only their direct supervisor sees the data and then circulating it widely is the kind of gap the FTC treats as deceptive.
A well-drafted form also shifts the analysis for common-law privacy claims. Intrusion-upon-seclusion suits turn partly on whether the employee had a reasonable expectation of privacy in the tracked activity. A clear document explaining what is collected, when, and by whom makes that expectation much harder to establish. A vague form purporting to authorize round-the-clock tracking of personal movements can cut the other way and become evidence that the employer overreached.
What the Consent Form Should Include
Generic “I agree to GPS tracking” language does not carry the weight employers assume it does. The form should address each of the following with enough specificity that the employee understands the scope before signing.
- Business justification. State the reason for tracking. Verifying mileage for reimbursement at the IRS standard rate of 72.5 cents per mile for 2026, confirming service appointments, protecting expensive equipment, or ensuring safety in remote locations all qualify. Avoid vague catchalls like “operational purposes.”3Internal Revenue Service. IRS Sets 2026 Business Standard Mileage Rate at 72.5 Cents Per Mile, Up 2.5 Cents
- Tracked devices and vehicles. Identify every device, vehicle, or application subject to monitoring by name, model, or a description the employee can recognize.
- Active monitoring hours. Define when tracking begins and ends each day. If monitoring is limited to scheduled shifts, say so. If it extends to on-call periods, specify those separately.
- Data collected. List the specific metrics: real-time coordinates, speed, stop durations, route history, idle time. The employee should know exactly what the system records.
- Data access and retention. Name the job titles authorized to view location history. Restricting access to direct supervisors or fleet managers prevents misuse and strengthens the employer’s position if the form is ever challenged.
- Consequences of refusal. If declining to sign may result in reassignment, loss of certain duties, or termination, the form should say so plainly.
- Withdrawal of consent. Describe how an employee can revoke consent and what happens when they do. A documented process is better than an improvised one.
Collect only what the stated business purpose requires. If the goal is verifying that a technician arrived at a job site, continuous speed data and idle times go beyond what’s needed. Overcollection weakens the employer’s legal position and increases the data security burden. The FTC has made clear that companies should collect only what they need and dispose of it when they are done.4Federal Trade Commission. Privacy and Security
Off-Duty Tracking and Personal Vehicles
Tracking an employee during a shift in a company vehicle is one thing. Tracking that same employee on a Saturday afternoon is another. Courts weigh the employer’s business justification against the employee’s expectation of privacy, and that balance shifts sharply once the workday ends. Off-duty monitoring is difficult to justify as serving a legitimate business purpose, and the consent form should reflect that boundary explicitly.
Personal vehicles are harder still. Placing a GPS tracker on a vehicle someone owns without their knowledge is illegal in virtually every state, either under device-specific tracking statutes or general privacy law. Even with consent, tracking a personal vehicle outside work hours invites intrusion-upon-seclusion claims. If an employee uses their own car for work, the consent form should limit tracking to work-related trips and specify exactly how monitoring activates and deactivates. Employers who need continuous fleet visibility are generally better off providing company vehicles or dedicated tracking devices that stay in those vehicles.
Personal Phones and BYOD Boundaries
When tracking runs through a company-mandated app on an employee’s personal phone, the form needs sharp lines. It should specify that the tracking software operates only within the designated application and does not access personal location services, contacts, photos, or other data outside that app. If the technology supports geofencing or time-based activation so tracking only runs during scheduled hours, describe that mechanism.
Enforcement is the harder question. On a company-owned device, the employer controls the software environment. On a personal phone, the employee can disable location services, uninstall the app, or leave the phone at home. The form should address what happens in those scenarios, whether it is a policy violation, grounds for discipline, or simply a reason to issue a company device instead. Employers who need reliable location data from field workers are usually better off issuing dedicated equipment rather than fighting the technical and legal complications of personal phone tracking.
State Notice Laws and Penalties
Federal law sets a floor, not a ceiling. A handful of states require employers to give written notice before any electronic monitoring of employees, including GPS tracking. The structure is similar across statutes: the employer delivers a written notice describing the types of monitoring in use, the employee acknowledges receipt, and the employer posts the notice in a visible workplace location. Some states accept a one-time written disclosure. Others require daily electronic notice when the employee accesses employer-provided systems.
Per-violation civil penalties for missing notice are generally modest, with fines ranging from $100 to $3,000 per offense and escalating amounts for repeat violations. The real exposure is volume. Tracking fifty employees without proper notice turns a $500 fine structure into a five-figure liability quickly.
Separately, a growing number of states have criminalized placing a GPS device on someone’s vehicle or tracking their movements without consent. These laws originated in anti-stalking contexts but apply broadly enough to reach employer conduct, typically as misdemeanors with potential civil damages on top. Employers running fleets across multiple states need to account for both categories: the notice-and-consent statutes governing workplace monitoring and the device-specific tracking statutes carrying criminal exposure.
If an Employee Refuses to Sign
Employers can generally require GPS tracking as a condition of employment for roles where location monitoring serves a legitimate business purpose, such as delivery drivers, field technicians, and long-haul truckers. If an employee in one of those roles refuses to consent, the employer can typically reassign or terminate them, provided the tracking requirement was applied consistently and the refusal was not tied to protected activity like union organizing.
The analysis changes when the tracking demand reaches beyond what’s reasonable. Requiring consent to 24/7 personal vehicle monitoring as a condition of continued employment looks much more like coercion than a legitimate workplace requirement. It also changes when the refusal is collective. If a group of employees refuses to sign because they believe the tracking policy is unreasonable, that coordinated action may qualify as protected concerted activity under the National Labor Relations Act.5Office of the Law Revision Counsel. 29 U.S.C. 157 – Rights of Employees Retaliating against that pushback creates labor law exposure on top of any privacy claims.
Disclose the consequences of refusal upfront on the form itself, not as a threat but as a factual statement. “Employees who decline GPS monitoring may be reassigned to roles that do not require tracking” is far better than springing a termination on someone after the fact.
Unionized Workplaces
Employers with unionized workforces face an additional layer. The NLRA protects employees’ rights to organize and engage in collective action.5Office of the Law Revision Counsel. 29 U.S.C. 157 – Rights of Employees The NLRB General Counsel has identified GPS tracking as a technology that could interfere with those rights by impairing employees’ ability to engage in protected activity or keep it confidential from their employer.6National Labor Relations Board. NLRB General Counsel Issues Memo on Unlawful Electronic Surveillance and Automated Management Practices
Introducing GPS tracking in a union shop can qualify as a mandatory subject of bargaining if it represents a material, substantial, and significant change to employment conditions. Where an employer already had an established monitoring practice, such as using investigators to check on suspected time theft, adding a GPS device to aid that existing practice may not trigger bargaining obligations. Rolling out fleet-wide GPS tracking for the first time almost certainly does. Negotiate the policy with the union before presenting individual consent forms, and reference the collective bargaining agreement in the form itself if one governs the terms.
Signing, Delivering, and Retaining the Form
Present the form during onboarding for new hires, or before a new tracking system goes live for current employees. Timing matters. Presenting the form on the same day the tracking starts, or after it has already begun, undermines the “prior consent” that federal law requires.1Office of the Law Revision Counsel. 18 U.S.C. 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited
Electronic signatures are valid. The federal E-SIGN Act provides that a signature or contract cannot be denied legal effect solely because it is in electronic form.7Office of the Law Revision Counsel. 15 U.S.C. 7001 – General Rule of Validity Digital signature platforms that produce timestamped records create a clear compliance trail if the employer ever needs to prove when consent was obtained. A wet signature on paper works too. Give the employee a copy immediately and put the original in the personnel file.
Federal recordkeeping rules set minimum retention periods that vary by record type. The EEOC requires private employers to keep personnel and employment records for at least one year from the date of the record or the personnel action, whichever is later, and for one year from the termination date for involuntarily terminated employees.8U.S. Equal Employment Opportunity Commission. Summary of Selected Recordkeeping Obligations in 29 CFR Part 1602 The Department of Labor requires payroll records and related wage-computation documents to be preserved for two to three years.9U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements Under the Fair Labor Standards Act
GPS consent forms don’t fit neatly into either bucket. The safer practice is to retain them for the longer of the applicable state retention period or the full duration of employment plus at least one year. If the employer uses GPS data to make decisions about discipline, pay, or termination, EEOC rules may require longer retention when a discrimination charge is filed. Store signed forms in a secure digital system with access controls, and audit regularly to confirm that every actively tracked employee has a current form on file.