GPS og medarbejderovervågning i Tyskland
hvad der skal til for at være lovlig

• Agreement with the works council (Betriebsvereinbarung) before installation, under section 87 BetrVG

  Det afhængerkun i visse tilfælde

  In Germany the co-determination of the Betriebsrat is mandatory for technical systems capable of monitoring the conduct or performance of workers (section 87(1) no. 6 BetrVG): without an agreement with the works council the system cannot be activated. But this applies ONLY where a Betriebsrat exists; many SMEs do not have one, and then this step does not apply (the entire GDPR still applies). What matters is the objective capability to monitor, not the employer's intention.

  Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)

• Authorization from a labour authority before installation

  Nejikke påkrævet

  Germany does not require prior authorization from a labour authority (there is no equivalent of the Italian Labour Inspectorate). The filter is the agreement with the works council; the data protection authority acts only as a supervisory body, and is consulted in advance only in the case of Article 36 GDPR (high residual risk that cannot be mitigated, identified by the DPIA).

  Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)

• Valid legal basis for the processing (Article 6 GDPR)

  Japåkrævet

  A legal basis is required. Note: after the CJEU judgment C-34/21 of 30 March 2023, section 26 BDSG is no longer sufficient on its own as a standalone basis; the processing must be grounded directly on Article 6 GDPR (e.g. performance of the contract, legal obligation, legitimate interest with a balancing test). A possible dedicated law (Beschäftigtendatengesetz) is under discussion but does NOT appear to be in force.

  Garante del Baden-Württemberg, FAQ sulle basi giuridiche dei dati dei dipendenti (sentenza CGUE C-34/21)

• Privacy notice to workers (Article 13 GDPR)

  Japåkrævet

  Workers must be clearly informed about which location data is collected, how, when and why.

  Regolamento UE 2016/679 (GDPR)

• Prohibition of continuous tracking (data minimisation, Article 5 GDPR)

  Japåkrævet

  The German authority is clear: systems that allow permanent monitoring of employees are in principle unlawful, and workers must not be exposed to constant monitoring pressure. Location is collected only when it serves a legitimate purpose (e.g. safety of a lone worker, protection of the cargo), not continuously.

  Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti

• Data protection impact assessment (DPIA) for the geolocation of employees

  Japåkrævet

  The geolocation of employees is expressly on the DSK list of processing operations that require a data protection impact assessment (Article 35 GDPR). It must be carried out before activating the system.

  Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)

• Databeskyttelsesmyndigheden i den delstat, hvor virksomheden har hjemsted

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  Germany is federal: for private companies the supervisory authority is the data protection authority of the Land where the company is based (16 authorities), not the federal commissioner. Examples: Bavaria BayLDA, Berlin BlnBDI. The official list is on the BfDI website.

  Bekræftet den 15. juni 2026

• BfDI, elenco delle autorità dei Land (per trovare la tua)

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  Bekræftet den 15. juni 2026

• BayLDA (esempio, Baviera)

  https://www.lda.bayern.de/de/index.html

  https://www.lda.bayern.de/de/index.html

  Bekræftet den 15. juni 2026

• Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)
• Bundesdatenschutzgesetz, § 26 (dati dei lavoratori)
• Garante del Baden-Württemberg, FAQ sulle basi giuridiche dei dati dei dipendenti (sentenza CGUE C-34/21)
• Regolamento UE 2016/679 (GDPR)
• Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti
• Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)
• BfDI, elenco delle autorità garanti per la protezione dei dati dei Land
• Garante di Amburgo, comunicato del 1 ottobre 2020 (sanzione H&M)
• BayLDA, autorità garante della Baviera
• BlnBDI, autorità garante di Berlino

Dette er en informativ ressource, ikke juridisk rådgivning. Inden du tager et overvågningssystem i brug, så få en fagperson til at gennemgå din situation.