GPS and worker monitoring, country by country
GPS and worker monitoring in Germany
what you need to stay compliant
Updated on June 15, 2026
Competent authority
Data protection authority of the Land where the company is basedVerified on June 15, 2026
What you risk
EUR 35.3 millionrelated case, not GPS
Updated on June 15, 2026
What you need
6For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.
What you need
For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.
Agreement with the works council (Betriebsvereinbarung) before installation, under section 87 BetrVG
It dependsonly in certain casesIn Germany the co-determination of the Betriebsrat is mandatory for technical systems capable of monitoring the conduct or performance of workers (section 87(1) no. 6 BetrVG): without an agreement with the works council the system cannot be activated. But this applies ONLY where a Betriebsrat exists; many SMEs do not have one, and then this step does not apply (the entire GDPR still applies). What matters is the objective capability to monitor, not the employer's intention.
Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)
Authorization from a labour authority before installation
Nonot requiredGermany does not require prior authorization from a labour authority (there is no equivalent of the Italian Labour Inspectorate). The filter is the agreement with the works council; the data protection authority acts only as a supervisory body, and is consulted in advance only in the case of Article 36 GDPR (high residual risk that cannot be mitigated, identified by the DPIA).
Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)
Valid legal basis for the processing (Article 6 GDPR)
YesrequiredA legal basis is required. Note: after the CJEU judgment C-34/21 of 30 March 2023, section 26 BDSG is no longer sufficient on its own as a standalone basis; the processing must be grounded directly on Article 6 GDPR (e.g. performance of the contract, legal obligation, legitimate interest with a balancing test). A possible dedicated law (Beschäftigtendatengesetz) is under discussion but does NOT appear to be in force.
Privacy notice to workers (Article 13 GDPR)
YesrequiredWorkers must be clearly informed about which location data is collected, how, when and why.
Prohibition of continuous tracking (data minimisation, Article 5 GDPR)
YesrequiredThe German authority is clear: systems that allow permanent monitoring of employees are in principle unlawful, and workers must not be exposed to constant monitoring pressure. Location is collected only when it serves a legitimate purpose (e.g. safety of a lone worker, protection of the cargo), not continuously.
Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti
Data protection impact assessment (DPIA) for the geolocation of employees
YesrequiredThe geolocation of employees is expressly on the DSK list of processing operations that require a data protection impact assessment (Article 35 GDPR). It must be carried out before activating the system.
Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)
The procedure, step by step
If a Betriebsrat exists, negotiate and sign the Betriebsvereinbarung before activating (section 87 BetrVG).
Identify a valid legal basis under Article 6 GDPR (no longer section 26 BDSG alone, after the C-34/21 judgment).
Carry out the data protection impact assessment (DPIA): it is required for the geolocation of employees.
Provide the privacy notice to the workers (Article 13 GDPR).
Configure the system with data minimisation: no continuous tracking, location only when needed.
If the DPIA reveals a high residual risk that cannot be mitigated, consult the data protection authority of your Land in advance (Article 36 GDPR).
If you switch systems: when you change your monitoring system or software, update and re-issue the privacy notice, and check whether the national agreement or authorisation for remote monitoring needs renewing. The provider (data processor), the data collected and the methods often change: the one provided earlier is not enough.
Who to contact
Data protection authority of the Land where the company is based
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Germany is federal: for private companies the supervisory authority is the data protection authority of the Land where the company is based (16 authorities), not the federal commissioner. Examples: Bavaria BayLDA, Berlin BlnBDI. The official list is on the BfDI website.
Verified on June 15, 2026
BfDI, elenco delle autorità dei Land (per trovare la tua)
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Verified on June 15, 2026
BayLDA (esempio, Baviera)
https://www.lda.bayern.de/de/index.html
https://www.lda.bayern.de/de/index.html
Verified on June 15, 2026
The template to download
Download the free GPS privacy notice template for Germany
Employee geolocation privacy notice template, compliant with GDPR Art. 13, including the country’s legal basis and supervisory authority. Fill in the blank fields and have it checked by your advisor.
Want the next practical guides on GPS and field-team management too? Leave your email (optional).
No spam, unsubscribe in one click.
H&M, fine by the Hamburg data protection authority of 1 October 2020: systematic surveillance of hundreds of employees at the Nuremberg service centre (notes on private life, illnesses, family). It is not a specific GPS case, but it is the best-known fine in Germany for the unlawful monitoring of workers.
Cite this page
You're free to cite it, as long as you credit the source with a link to this page.
GPS and worker monitoring in Germany: what you need to stay compliant - GeoTapp. https://geotapp.com/en-ca/resources/gps-workers-eu/germany/Source: <a href="https://geotapp.com/en-ca/resources/gps-workers-eu/germany/?utm_source=citazione&utm_medium=referral&utm_campaign=risorse">GPS and worker monitoring in Germany: what you need to stay compliant - GeoTapp</a>© 2026 GeoTapp. Data compiled and verified by GeoTapp. For full republication of the dataset or commercial use, get in touch.
Sources
- Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)
- Bundesdatenschutzgesetz, § 26 (dati dei lavoratori)
- Garante del Baden-Württemberg, FAQ sulle basi giuridiche dei dati dei dipendenti (sentenza CGUE C-34/21)
- Regolamento UE 2016/679 (GDPR)
- Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti
- Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)
- BfDI, elenco delle autorità garanti per la protezione dei dati dei Land
- Garante di Amburgo, comunicato del 1 ottobre 2020 (sanzione H&M)
- BayLDA, autorità garante della Baviera
- BlnBDI, autorità garante di Berlino
This is an informational resource, not legal advice. Before activating a monitoring system, have your situation checked by a professional.
Want a system that is already compliant?
GeoTapp records the location only at clock-in, not continuously, and generates the notice for workers to sign. Try it for free.