You’ve just told the team about the new GPS clock-in system. Most nod along. Then Dave from the cleaning crew folds his arms: “You can’t track me. That’s my right.” The room goes quiet. Everyone’s watching. Is Dave right? Can he actually refuse? And if he can, what happens to your entire rollout?
It’s the question every SME owner dreads. And in the UK, the answer is more nuanced than either side expects. It comes down to one thing: how you’ve set it up.
Let’s start with the legal foundation. Under UK GDPR, you don’t need consent to deploy GPS tracking on your workforce. Consent is actually the wrong legal basis here — because it can be withdrawn at any time, making your whole system fragile. The correct basis is legitimate interest (Article 6(1)(f)) or performance of a contract (Article 6(1)(b)). Your legitimate interest in verifying attendance and documenting service delivery outweighs the privacy intrusion — provided the intrusion is proportionate.
What the ICO says
The Information Commissioner’s Office has published detailed guidance on monitoring at work. The key principle: you must carry out a Data Protection Impact Assessment before deploying GPS, you must inform employees clearly about what data you’re collecting and why, and monitoring must be proportionate. Tracking someone’s location only at clock-in and clock-out? Proportionate. Continuous tracking throughout the shift? Almost certainly disproportionate and likely to be challenged successfully at an Employment Tribunal.
When the employee CAN refuse
An employee has legitimate grounds to refuse if you haven’t provided a privacy notice before activating the system. If you haven’t explained what data is collected, who has access, how long it’s retained, and what their rights are, their refusal is legally sound — not because they have a right to refuse GPS, but because you’ve failed your transparency obligation under Article 13 of UK GDPR.
Try GeoTapp free for 14 days
No credit card required. Get started in 2 minutes.
Start free trial
They can also refuse if the system tracks continuously, if data is used for purposes beyond what was disclosed, or if they’ve been denied access to their own records. In each case, the problem isn’t the refusal — it’s your system.
When they CANNOT refuse
If you’ve completed a DPIA, provided a clear privacy notice, and the system only records location at clock-in and clock-out — then refusing to use it is equivalent to refusing to clock in at all. That’s a contractual obligation, and the method of clocking in is a reasonable management instruction. An Employment Tribunal would likely view persistent refusal as misconduct, provided you can demonstrate that the system is proportionate and properly documented.
The smartest approach is to make refusal pointless by removing every reasonable objection. An in-app privacy notice in the employee’s own language, signed digitally before the first clock-in, with GPS that only activates after signing — that’s the setup no Employment Tribunal will challenge.
The practical reality on the ground
In fifteen years of field service management, the pattern is always the same. The employer agonises for months about how the team will react. They finally roll it out, braced for rebellion. And in 90% of cases, the team barely blinks. The ones who push back are almost always the ones with something to hide — buddy punching, late arrivals logged as on-time, hours claimed but not worked. For every honest operative, GPS is actually welcome: it means their hard work is finally documented and their word is backed by data.
The 2026 Timeero survey confirms this at scale: 75.5% of tracked workers are comfortable with GPS, and 53% actively prefer an employer who uses it. The resistance you fear is a minority position — and it evaporates when transparency is in place. A clear privacy notice, signed digitally before the first clock-in, in the worker’s own language, with access to their own data at any time. That’s not just compliance. That’s the foundation of trust.
The question isn’t “can my employee refuse GPS?” It’s “have I given them a reason to?” If the answer is no — if you’ve informed, minimised, and given access — then refusal has no legal basis. And in practice, it won’t happen, because transparent systems don’t generate resistance. If you want a system that handles notices, consent and transparency automatically, in 11 languages, GDPR-compliant, see how GeoTapp works. 14 days free.
Get articles like this in your inbox
Practical insights on GPS tracking, field operations and GDPR. No spam, just useful content.
