An employee GPS tracking consent form is a written agreement in which a worker acknowledges an employer’s use of geolocation technology and authorizes it during defined work hours. To hold up in a dispute, the form has to identify the employee and the tracked device precisely, spell out exactly what data is collected and who sees it, respect off-duty privacy, and satisfy whichever state’s notice law applies where the employee works. What follows is what to put in the form, what to leave out, and how to sign and file it so the consent actually means something.
Identifiers to Pin Down Before You Draft
Errors in the identifying section give employees the easiest possible argument later: that they never consented to tracking on this device. Pull each piece from its source document rather than retyping from memory.
- Full legal name of the employee, matching payroll or government ID. Not a nickname.
- Registered company name, as filed with the Secretary of State. Add any DBA if you operate under one.
- Device or vehicle identifier. For a vehicle-mounted tracker, use the seventeen-character VIN from the dashboard plate or driver’s side door jamb. For a company phone or tablet, use the device serial number or IMEI from the settings menu.1National Highway Traffic Safety Administration. VIN Decoder
- Standard work schedule, for example 7:00 AM to 4:00 PM. These hours define when tracking activates and when it must stop.
- Named data access contact: the person or title who will actually review location data. Employees should know who is watching.
Verify each identifier against the source. A transposed VIN digit or a misspelled name is enough to argue the consent didn’t cover the equipment being tracked.
Clauses the Form Must Contain
Scope of Monitoring
Say exactly what the system captures. At minimum: latitude, longitude, timestamps, and vehicle speed at defined intervals during the employee’s shift. If the system also logs hard braking, idle time, or route deviations, list those too. Generic phrases like “location information” invite disputes about what the employee actually understood. If tracking is geographically bounded — a metro service area, active job sites and transit between them — write those limits in.
Business Purpose
State concrete reasons: dispatch and routing, billing verification, hours-of-service compliance, worker safety in remote conditions. Tying the monitoring to operational goals shows a legitimate business function rather than open-ended surveillance. A field technician’s form should not read the same as a long-haul driver’s.
Data Access and Retention
Name the roles authorized to view logs — fleet manager, direct supervisor, HR director — rather than a blanket “management.” Then set a defined retention period. Some employers purge after ninety days; regulated industries may hold records for years. State the number and describe how records are deleted at the end of the window. The California Consumer Privacy Act specifically requires businesses to disclose how long they intend to retain each category of personal information, including geolocation data.2California Privacy Protection Agency. What General Notices Are Required By The CCPA
Consequences of Tampering
Write out what happens if the employee disables, removes, or interferes with the tracker without authorization. List the actual disciplinary steps — written warning, suspension, termination — so the employee knows the stakes before signing, and so the employer has documented grounds if it happens.
Off-Duty Tracking Limits
This is where employers most often create legal exposure. The form has to address personal-time tracking directly rather than leaving it implied.
California is the clearest example. Assembly Bill 984, signed in 2022, prohibits employers from monitoring employees through alternative devices except during work hours and only when strictly necessary for job performance. It also bars retaliation against any employee who disables monitoring, including vehicle location technology, outside work hours. Violations carry a civil penalty of $250 per employee per violation.3LegiScan. Bill Text: CA AB984
Even without a state statute, tracking during personal time raises common-law privacy claims that courts treat far more sympathetically than workplace monitoring. The consent form should therefore:
- State that tracking occurs only during scheduled work hours, and name those hours or reference the posted schedule.
- Explain how the employee can disable tracking during personal time, or confirm that it has deactivated.
- State explicitly that turning the device off after hours carries no disciplinary consequences.
If the hardware sits in a company vehicle the employee takes home, include written after-hours deactivation instructions in the form itself.
State Laws That Change the Language
The consent form has to be adapted to the law of every state where a tracked employee works, not just the state where the company is headquartered.
California
Under the CCPA, “precise geolocation” is classified as sensitive personal information.4Office of the California Attorney General. California Consumer Privacy Act (CCPA) The employer must provide a Notice at Collection listing the categories collected, the purposes, and the retention period for each.2California Privacy Protection Agency. What General Notices Are Required By The CCPA Build those disclosures into the form or attach the Notice at Collection alongside it. Non-compliance carries administrative fines under Civil Code Section 1798.155.5California Legislative Information. California Civil Code Section 1798.155 AB 984 adds monitoring-specific disclosures: the data collected, the positions authorized to access it, the dates and frequency of monitoring, where data is stored, and the employee’s right to disable tracking outside work hours.3LegiScan. Bill Text: CA AB984
Connecticut
Connecticut General Statutes Section 31-48d requires every employer engaged in electronic monitoring to give prior written notice to affected employees describing the types of monitoring that may occur, and to post the notice in a conspicuous, readily available place. The posting satisfies the written notice requirement. The consent form should include a line where the employee acknowledges receiving the notice. Civil penalties run $500 for a first offense, $1,000 for a second, and $3,000 for the third and each subsequent offense.6FindLaw. Connecticut General Statutes 31-48d – Employers Engaged in Electronic Monitoring Required to Give Prior Notice to Employees
New York
Effective May 2022, New York private employers must provide written notice on hiring that telephone, email, transmissions, and internet activity may be monitored by any lawful means. The employer must obtain written acknowledgment of receipt and post the notice conspicuously. Penalties mirror Connecticut’s: up to $500 for a first offense, $1,000 for a second, and $3,000 for a third or subsequent offense.
New Jersey
Since April 2022, New Jersey requires written notice before using any tracking device in a vehicle used by an employee. It applies to both company-owned and personal vehicles used for work. Non-compliance can result in civil penalties of up to $2,500.
Illinois, Delaware, and Everywhere Else
Illinois requires employers to inform employees about GPS tracking and explain what the device collects, though written consent is not explicitly mandated. Delaware’s privacy law prohibits installing a GPS tracker on a vehicle or monitoring an employee without consent. Most remaining states have no GPS-specific statute but apply general privacy principles, and tracking that infringes on a reasonable expectation of privacy may be treated as harassment or stalking under criminal codes. Check the rules in every state where a tracked employee works.
Union Workplaces
If the workforce is represented by a union, launching GPS tracking may trigger a duty to bargain before the system goes live. The National Labor Relations Board has held that installing GPS technology is a mandatory subject of bargaining when it constitutes a material, substantial, and significant change to terms and conditions of employment, particularly when the data increases the likelihood of discipline.7National Labor Relations Board. NLRB General Counsel Issues Memo on Unlawful Electronic Surveillance and Automated Management Practices
An upgrade from paper trip logs to digital tracking of the same information may not rise to that level. Introducing location monitoring where none existed, or using GPS data to discipline for the first time, almost certainly does. Give the union notice and an opportunity to bargain before distributing consent forms. Rolling out tracking first and negotiating later is an unfair labor practice, and the forms signed in the meantime may not hold up.
Personal Vehicle Add-Ons
Tracking a company vehicle is well-settled ground once notice is given. Personal vehicles are not. Employees have stronger privacy expectations in their own cars, and installing hardware on a vehicle you don’t own creates risk even with signed consent. If the job requires it, the form needs three extra provisions:
- A standalone acknowledgment, not buried in general consent language, in which the employee specifically agrees to tracking on their personal vehicle.
- Written steps for disabling or removing the tracker after hours, plus an explicit no-discipline statement.
- A commitment that the employer will not retain, review, or use location data captured outside scheduled work hours. If the system records continuously, describe the technical filtering process.
Where practical, a mobile app on a company-issued phone the employee can leave in a bag or turn off is cleaner than mounting hardware on a personal vehicle. Specify in the form which method is in use.
Signing, Storing, and Renewing the Form
Distribution and Signature
Send the completed form through a channel that leaves a record: an HR system, secure email, or a document-signing platform. Give the employee time to read it. Pressuring someone to sign on the spot at onboarding is a bad fact if consent is later challenged. Electronic signatures are valid; the federal ESIGN Act provides that a signature or contract cannot be denied legal effect solely because it is in electronic form.8Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity If the employee signs by hand, have a manager or HR representative witness the signing and note the date. Both parties get a fully executed copy right away.
Storage
File the signed form in the employee’s personnel record. Paper copies go in a locked cabinet with access limited to HR and relevant supervisors. Digital copies belong in an encrypted folder or document management system with role-based access. Audit periodically to confirm every actively tracked employee has a current signed form. A missing form during a regulatory inspection or labor dispute is nearly as bad as never having asked.
Updates
Get a new signature whenever the scope changes: new tracking system, different data points, expanded geographic zones, new people with access. Review the template against current state regulations at least annually, and keep a dated version history so you can show good faith if the program is audited.
A Note on Using GPS Data for Mileage
GPS records can support business mileage deductions, but the tracking consent form does not automatically cover that use. Under Internal Revenue Code Section 274(d), no deduction is allowed for travel expenses unless the taxpayer substantiates the amount, the time and place of travel, and the business purpose of each trip with adequate records.9Office of the Law Revision Counsel. 26 USC 274 – Disallowance of Certain Entertainment, Etc., Expenses A GPS log covers origin, destination, timestamps, and miles automatically; it does not supply the business purpose. If the company plans to use tracking data this way, disclose the additional use in the consent form and add a field or companion log where drivers record the reason for each trip. Ordinary commuting between home and a fixed workplace is not deductible regardless of what the GPS shows.