GeoTapp - The platform that makes work verifiable
Try free

Products

Sectors

GeoTapp - The platform that makes work verifiable
PricingCompareResourcesContactBlog

Products

GeoTapp FlowGeoTapp TimeTrackerGeoTapp Verifier

Sectors

InstallersCleaningSecurityElectriciansPlumbersHeating & Plumbing

Login

Login
Try free
GeoTapp / Resources / Cyprus

GPS and worker monitoring, country by country

GPS and worker monitoring in Cyprus
what you need to stay compliant

Updated on August 3, 2026

Competent authority

Cypriot Commissioner for Personal Data Protection

Verified on June 15, 2026

What you risk

82,000 EUR

related case, not GPS

Updated on August 3, 2026

What you need

5

For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.

What you need

For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.

  • Prior information to workers (art. 13) and the existence of a legal basis

    Yesrequired

    the worker must be informed before monitoring begins about the controller, purposes and legal basis; there is no specific Cypriot law on GPS, the GDPR framework and Law 125(I)/2018 apply.

    GDPR, art. 13 (informazione)

  • Prior authorisation from an authority before installation

    Nonot required

    no prior authorisation from the Commissioner is needed; with the GDPR the old notification regime has been abolished.

    Eurofound, monitoraggio dei lavoratori a Cipro (Legge 125(I)/2018)

  • Basis = legitimate interest with balancing, not consent

    Yesrequired

    in the employment relationship consent is not freely given; the usual basis is legitimate interest, with a documented balancing test that does not override the workers rights.

    GDPR, art. 13 (informazione)

  • No continuous round-the-clock tracking; data minimisation (art. 5.1.c)

    Yesrequired

    continuous, always-on GPS tracking breaches data minimisation; it must be limited to what is necessary (working hours, actual risk).

    Regolamento UE 2016/679 (GDPR)

  • Impact assessment (DPIA) for systematic monitoring of employees (art. 35)

    Yesrequired

    a DPIA is required when employee monitoring is systematic; the Commissioner assesses proportionality case by case.

    Eurofound, monitoraggio dei lavoratori a Cipro (Legge 125(I)/2018)

The procedure, step by step

  1. Identify a valid legal basis (legitimate interest) and document the balancing test.

  2. Inform workers before monitoring begins (art. 13).

  3. Carry out the impact assessment (DPIA) for systematic monitoring.

  4. Limit GPS to what is necessary: no continuous round-the-clock tracking.

  5. Configure the system proportionately and check that the interest does not override the workers rights.

  6. If you switch systems: when you change your monitoring system or software, update and re-issue the privacy notice, and check whether the national agreement or authorisation for remote monitoring needs renewing. The provider (data processor), the data collected and the methods often change: the one provided earlier is not enough.

PROVA GPSREPORT SIGILLATOVERIFICA INDIPENDENTENESSUNA SORVEGLIANZADATI IN EUROPAFUNZIONA OFFLINEPROVA GPSREPORT SIGILLATOVERIFICA INDIPENDENTENESSUNA SORVEGLIANZADATI IN EUROPAFUNZIONA OFFLINE

Who to contact

The template to download

Download the free GPS privacy notice template for Cyprus

Employee geolocation privacy notice template, compliant with GDPR Art. 13, including the countryโ€™s legal basis and supervisory authority. Fill in the blank fields and have it checked by your advisor.

Want the next practical guides on GPS and field-team management too? Leave your email (optional).

No spam, unsubscribe in one click.

What you risk: 82,000 EUR

Cypriot Commissioner against the Louis Group (decision of 25 October 2019, made public in January 2020): use of an automated tool (Bradford Factor) to profile the sick-leave absences of 818 employees, without a valid legal basis and over health data (arts. 6 and 9 GDPR); the legitimate-interest balancing failed. Total fine 82,000 euros (70,000 + 10,000 + 2,000 against three companies of the group). It is not a GPS case, but it is the landmark Cypriot penalty on employee monitoring.

https://www.edpb.europa.eu/news/national-news/2020/cypriot-supervisory-authority-banned-processing-automated-tool-used-scoring_en

Cite this page

You're free to cite it, as long as you credit the source with a link to this page.

Text
GPS and worker monitoring in Cyprus: what you need to stay compliant - GeoTapp. https://geotapp.com/en/resources/gps-workers-eu/cyprus/
HTML
Source: <a href="https://geotapp.com/en/resources/gps-workers-eu/cyprus/?utm_source=citazione&utm_medium=referral&utm_campaign=risorse">GPS and worker monitoring in Cyprus: what you need to stay compliant - GeoTapp</a>

ยฉ 2026 GeoTapp. Data compiled and verified by GeoTapp. For full republication of the dataset or commercial use, get in touch.

Sources

This is an informational resource, not legal advice. Before activating a monitoring system, have your situation checked by a professional.

Want a system that is already compliant?

GeoTapp records the location only at clock-in, not continuously, and generates the notice for workers to sign. Try it for free.