GPS and worker monitoring in Czech Republic: what you need to stay compliant

What you need

For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.

• Direct information to workers on the scope and manner of the monitoring (Zakonik prace art. 316)

  Yesrequired

  If there is a serious reason for the monitoring, the employer is required to inform workers directly about the scope of the control and the way in which it is carried out.

  Zakonik prace (Codice del lavoro), art. 316

• Prohibition on monitoring workers without a serious reason inherent to the nature of the activity (art. 316)

  Nonot required

  Without a serious reason inherent to the particular nature of its activity, the employer may not infringe the worker's privacy by subjecting them to open or covert surveillance (including tracking).

  Zakonik prace (Codice del lavoro), art. 316

• Prior authorisation from an authority before installation

  Nonot required

  No prior authorisation from the UOOU is required; the controller assesses the legal basis and proportionality itself, with a DPIA where required.

  UOOU/gdpr.cz, monitoraggio dei veicoli aziendali tramite GPS

• Proportionate GPS (asset protection, trip logbook), not continuous monitoring; opt-out for private use

  Yesrequired

  For the UOOU, GPS is permitted mainly for asset protection and the trip logbook, not for intensive or constant monitoring of workers; for private use of the vehicle, deactivation (opt-out) is recommended.

  UOOU/gdpr.cz, monitoraggio dei veicoli aziendali tramite GPS

• Impact assessment (DPIA) for monitoring the location or movement of workers (UOOU list)

  Yesrequired

  The UOOU list requires a DPIA for processing operations that monitor the movement or location of persons and for attendance recording systems.

  UOOU, lista dei trattamenti che richiedono una DPIA

The procedure, step by step

1. 1

   Verify a serious reason inherent to the nature of your activity for the monitoring (art. 316).

2. 2

   Identify a valid legal basis (normally legitimate interest, not consent).

3. 3

   Carry out the impact assessment (DPIA) for monitoring the location of workers.

4. 4

   Inform workers directly about the scope and manner of the control (art. 316 + art. 13 GDPR).

5. 5

   Configure the system in a proportionate way: no continuous monitoring, opt-out for private use.

6. 6

   If you switch systems: when you change your monitoring system or software, update and re-issue the privacy notice, and check whether the national agreement or authorisation for remote monitoring needs renewing. The provider (data processor), the data collected and the methods often change: the one provided earlier is not enough.

Who to contact

What you risk

Sources

• Zakonik prace (Codice del lavoro), art. 316
• UOOU/gdpr.cz, monitoraggio dei veicoli aziendali tramite GPS
• UOOU, lista dei trattamenti che richiedono una DPIA
• UOOU, presentare una segnalazione
• UOOU, sanzione Ceska posta (GPS portalettere)
• Regolamento UE 2016/679 (GDPR)