Bossware and worker GPS: what European law actually allows

There is an idea that has been doing the rounds among employers ever since tracking software started costing less than a coffee: if I can see everything, why wouldn’t I. Where the vans are, how long they idle, when a technician actually clocks off, how many minutes they sit at a red light. The Americans even gave it a name, bossware, the tools that measure every breath a worker takes, and a recent Berkeley and Vanderbilt study put on record just how fast they are spreading. The temptation manages to look innocent, almost tidy: more data, more control, fewer arguments with the client. Then Europe walks in, and on this ground Europe made its mind up a long time ago.

The real question was never whether you can hand your crew a GPS, that answer is almost always yes. The question is on what terms, and here the continent splits into thirty-nine different shades. We went through the legal position in thirty-nine countries, the twenty-seven of the Union plus Norway, Iceland, the United Kingdom, Switzerland and the Balkans now falling into line, and the picture that comes out dismantles the idea that you just buy the app and switch it on. In almost all of them continuous round-the-clock tracking is banned or heavily restricted; in almost all of them the GPS has to go dark the moment the vehicle slips into private use; and in thirty-seven of those thirty-nine the legal basis is not the worker’s consent, considered far too fragile in a relationship where one side gives orders and the other signs, but legitimate interest, which has to be proven and balanced.

Thirty-six of those thirty-nine countries want an impact assessment before you even start, and in the vast majority employee GPS monitoring has been written explicitly onto the regulators’ high-risk lists. In plain English: it is not a form you sign and file, it is the moment you have to set out on paper why you need it, what you collect and how long you keep it. Whoever skips that step is not saving time, they are setting aside a complaint for the day it will hurt most. In the UK the ICO has said as much in its monitoring guidance, and the Home Office learned it the hard way when its GPS tagging of migrants drew enforcement rather than applause.

Italy has the tightest gate in Europe

The national differences are where the map gets genuinely interesting. Italy, for a start, has the narrowest gate of the lot: Article 4 of the Workers’ Statute demands a union agreement or authorisation from the labour inspectorate before you install any system capable of remote monitoring, and it demands it always, with no “we are only a handful of us” shortcut. No other country in the group ties your hands so flatly regardless of company size. It is the only one of the thirty-nine that grants no thresholds at all.

Germany plays a different hand, every bit as firm. There the works council, the Betriebsrat, holds a genuine co-determination power: where one exists, the GPS does not switch on without an agreement with it, and it hardly matters that you call it “proof” rather than “control”, because German law looks at what the system is objectively capable of doing, not at your intentions. This is not lecture-hall theory: the Hamburg regulator fined H&M more than thirty-five million euros for cataloguing the private lives of its staff, the heaviest penalty in the entire survey. Works-council co-determination as a mandatory gate comes back in six countries, from Germany to Austria, from the Netherlands to Belgium and on to Luxembourg and Croatia.

---

From Switzerland to the Balkans, one line

Move west or east and the accent changes, the substance does not. Switzerland, which is not even in the Union, is if anything stricter than the European Regulation: it bans from the outset systems whose purpose is to monitor how people behave at work, and it is the individual who set them up who answers for it, not some abstract entity to hide behind. Montenegro remains the only one to require prior authorisation from the authority before the system is even switched on. And in the two outliers, Belarus and Ukraine, the legal basis falls back to the individual’s consent, the very model the rest of the continent threw out precisely because between an employer and an employee there is very little that is freely given.

Ever wondered why, across fifty different legal systems, the conclusions look so alike? Because beneath the names of the laws runs a single line, from the Alps to the Balkans: the rule does not forbid you from knowing the work was done, it forbids you from turning the worker into a dot to follow all day long. That is the difference between proof and a stake-out. You can show that your crew reached the site at eight and left at five without ever knowing where each of them had lunch. In fact that is exactly what the regulators ask: collect the minimum you need to prove the job, and nothing more.

Proof is not surveillance

You can sit comfortably on that line, provided you pick tools built to sit there. A system that records the position only at the moment of clocking in and out, at the start and end of the shift and not all day, captures the proof of work without sliding into the continuous control that half of Europe outlaws. That is the principle GeoTapp runs on: one tap to open the shift, one to close it, and the location logged in those two instants, not in between. If you want the full country-by-country picture, the map these figures come from is public and free to consult, alongside a generator that drafts the Article 13 notice to workers in a few minutes.

Compliance is not the toll you pay for using technology in the field, it is the way to use it without one day having to explain to a regulator why you knew where your warehouseman slept. Which side of the line do you want to be on, the one of proof or the one of surveillance?