Employee GPS Tracking Laws in California: When Is It Legal?

Federal law provides limited restrictions on GPS tracking by employers. The Electronic Communications Privacy Act (ECPA), 18 U.S.C. § 2511, generally permits employer monitoring of communications and location on employer-provided devices and networks, with some exceptions for personal use. The Americans with Disabilities Act (ADA), 42 U.S.C. § 12101 et seq., requires that any monitoring be job-related and consistent with business necessity, but does not broadly restrict GPS tracking.

The Fair Labor Standards Act (FLSA), 29 U.S.C. § 201 et seq., does not directly regulate GPS tracking but may be implicated if tracking is used to monitor work time and wage compliance. The National Labor Relations Act (NLRA), 29 U.S.C. § 151 et seq., may restrict surveillance if it interferes with employee rights to organize or communicate about working conditions.

Federally, employers may track employees on company equipment and networks with minimal restriction, particularly when there is notice of monitoring. However, tracking on personal devices without consent, or tracking outside work hours, may violate the Wiretap Act if it involves real-time location data transmission. The EEOC enforces non-discrimination laws but has not issued specific GPS tracking guidance. Most federal protections focus on specific contexts (disability, union activity, wage-hour compliance) rather than general privacy.

California provides significantly stronger GPS tracking protections than federal law through multiple sources: constitutional privacy rights, statutory restrictions, and tort liability.

Under the California Constitution Article I Section 1, employees have an explicit right to privacy in the workplace. California courts have recognized that this right protects employees against intrusive employer monitoring, particularly when monitoring occurs during non-work time or in areas where privacy is reasonably expected. This constitutional protection applies to all employers, regardless of size.

California Labor Code section 2870 prohibits employers from controlling employee conduct during non-working hours, away from company premises, and without use of company equipment, unless the conduct is illegal or relates to the employer's business or reputation. This means GPS tracking that monitors off-duty activities—such as where an employee goes after work or on weekends—is presumptively prohibited unless the employer can show the activity directly affects the business.

California Penal Code section 632 requires two-party consent for recording of confidential communications, including location data transmitted in real-time if it reveals communication patterns. Covertly tracking an employee without notice may violate this section.

California Civil Code section 1708.8 establishes a broad invasion of privacy tort. Employers who engage in intrusive monitoring may face civil liability, including damages for emotional distress and statutory penalties. This applies regardless of whether the employee consented; the consent must be truly informed and voluntary.

The California Consumer Privacy Act (CCPA), California Civil Code section 1798.100 et seq., grants employees rights as consumers regarding personal information, including location data. Employers must disclose what data is collected, how it is used, and provide employees with rights to access, delete, and opt-out if feasible.

Key differences from federal law: (1) California requires affirmative disclosure and consent for personal device tracking; federal law permits employer monitoring with minimal notice. (2) California restricts off-duty monitoring under Labor Code section 2870; federal law has no parallel restriction. (3) California provides an invasion of privacy tort with damages; federal law relies primarily on the ECPA, which has a narrow scope. (4) California applies privacy protections to all employers; federal NLRA protections apply only to unionized workplaces or concerted activity. (5) California's constitutional privacy right is broader than any federal protection and applies to all employment relationships.

Employers may track company-owned vehicles without employee consent if the practice is disclosed in advance, such as in the employee handbook or employment agreement. Tracking of vehicles provided for business purposes (company cars, delivery trucks, service vehicles) is generally permitted with notice.

Tracking may be permitted when the employer can demonstrate a legitimate business need that outweighs the employee's privacy interest. Examples include tracking drivers for safety in high-risk situations, preventing theft, or ensuring compliance with client contracts. However, the employer must show the tracking is proportional to the business need—blanket, 24/7 tracking is less likely to meet this standard than targeted tracking of specific routes during work hours.

Off-duty monitoring is permitted under Labor Code section 2870 if the employee's conduct is illegal, directly relates to the employer's business, or affects the employer's legitimate business interests or reputation. For example, tracking a salesperson who is working for a competitor during non-work hours might be justified; tracking an employee's personal social life is not.

Employees who explicitly and voluntarily consent in writing to GPS tracking may be deemed to have waived privacy rights, but the consent must be informed (the employee understands the scope, frequency, and purpose of tracking) and not coerced (e.g., not a condition of employment without legitimate justification). Courts may refuse to enforce consent obtained under duress.

Small employers (very few employees) may have reduced expectations regarding privacy due to the informal nature of small workplaces, but this is a weak exception; California courts have held that size does not eliminate privacy rights.

Union-represented employees may have additional protections under collective bargaining agreements that restrict employer monitoring. Some union contracts explicitly prohibit or limit GPS tracking or require notice and consent.

At-will employment does not eliminate privacy rights. An employer cannot unilaterally terminate an employee for refusing to consent to unlawful GPS tracking; doing so may constitute wrongful termination or retaliation.

Step 1: Document the Tracking. Gather evidence of the GPS tracking: screenshots of tracking data, emails or notices from your employer describing the tracking system, your employment agreement or handbook, text messages or communications from your employer about location monitoring, and dates/times when you were tracked. If possible, obtain your location data history from your phone or the tracking platform. Document what device was tracked (company phone, personal phone, vehicle), when tracking occurred (work hours only or 24/7), how often location data was accessed, and whether you received notice or consent requests.

Step 2: Internal Complaint and Communication. Before filing externally, send a written email to your employer's HR department or management describing the tracking concern. State the facts: what you were tracked with, when, and why you believe it violates California law (e.g., tracking your personal phone without consent, off-duty monitoring, no disclosure). Request that the employer explain the legal basis for the tracking and provide a copy of the company's monitoring policy. Keep a copy of your email and any response. This creates a documented record and gives the employer an opportunity to cease the unlawful conduct. Document any retaliation that follows.

Step 3: File a Complaint with the California Department of Industrial Relations (DIR) or DFEH. For labor law violations under California Labor Code section 2870, file a wage claim or complaint with the California Labor Commissioner (part of DIR) at dir.ca.gov or call (888) 349-7900. For privacy invasion or other civil rights violations, file a charge with the California Department of Fair Employment and Housing (DFEH) at dfeh.ca.gov or call 1-888-FE-DFEH (1-888-334-3734). Provide your name, employer name and address, description of the tracking, dates, and why you believe it violates California law. Attach documentation from Step 1. The filing deadline for privacy invasion claims is generally four years from the date of violation; for Labor Code section 2870 claims, file promptly as the statute of limitations may be two or three years depending on the remedy sought.

Step 4: Investigation and Agency Process. The Labor Commissioner or DFEH will review your complaint and may investigate by interviewing witnesses, requesting records from your employer, and examining the company's GPS tracking policy. The investigation typically takes 30-90 days. You will be contacted for additional information if needed. If the agency finds merit, it may issue a citation and penalties. For DFEH charges, the agency will issue a determination of probable cause or no cause within 6-12 months. If the agency finds a violation, it may attempt conciliation; if conciliation fails, the case may be referred to the Civil Rights Department for litigation or your right to sue letter may be issued, allowing you to file a private lawsuit.

Step 5: Consult an Employment Attorney. Contact a California employment attorney specializing in privacy, wrongful termination, or labor law. A consultation is advisable if: (1) the employer retaliates after you complain (illegal under Labor Code section 1102.5), (2) you were terminated shortly after raising the tracking concern, (3) the tracking is extensive and caused emotional distress, or (4) the employer refuses to stop after you object. An attorney can file a private lawsuit under California Civil Code section 1708.8 (invasion of privacy tort) for damages, including compensatory and punitive damages. The attorney can also explore claims for wrongful termination in violation of public policy, retaliation, and emotional distress. Many California employment attorneys work on contingency; initial consultations are often free or low-cost.