How much do you risk tracking your workers?

It depends on the country and on what went wrong, but GDPR fines aren't symbolic: they reach a percentage of turnover that can floor a small business, and in several states there are labour-law consequences on top. Pick the destination above and you'll see the real maximum figure, with the case it's drawn from.

Yes, and the idea that regulators only go after the big players is one of the beliefs that costs the most. The cases listed on each country sheet include outfits of a handful of people, fined precisely for monitoring staff without the paperwork in order. Size affects the amount, not whether you're in the firing line.

No, and it's often not even the worst one. Data collected the wrong way becomes useless exactly when you need it, in a dispute with an employee or in front of a client contesting an invoice. You end up with the fine to pay and without the proof you thought you had.

Yes, because in an employment relationship consent counts for little: the person who gives it is assumed not to be truly free to refuse. Regulators look at whether the processing was proportionate and whether you had solid grounds and a clear privacy notice, not at whether someone signed a sheet. The workers' agreement on its own doesn't protect you.

From real decisions by data protection authorities and from national law, not from estimates. Each sheet gives the source and the case, so you can trace it back to the document. This is an informative resource, not legal advice: before switching a system on, have your situation checked by a professional.

By collecting the bare minimum you actually need: location at clock-in, not continuous tracking, with a signed privacy notice and a basis other than consent. That's exactly how GeoTapp was built, and the privacy-notice generator here in the resources prepares the document for them to sign.