GPS og overvåking av ansatte i Tyskland
hva som skal til for å være i orden

• Agreement with the works council (Betriebsvereinbarung) before installation, under section 87 BetrVG

  Det kommer an påbare i visse tilfeller

  In Germany the co-determination of the Betriebsrat is mandatory for technical systems capable of monitoring the conduct or performance of workers (section 87(1) no. 6 BetrVG): without an agreement with the works council the system cannot be activated. But this applies ONLY where a Betriebsrat exists; many SMEs do not have one, and then this step does not apply (the entire GDPR still applies). What matters is the objective capability to monitor, not the employer's intention.

  Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)

• Authorization from a labour authority before installation

  Neiikke påkrevd

  Germany does not require prior authorization from a labour authority (there is no equivalent of the Italian Labour Inspectorate). The filter is the agreement with the works council; the data protection authority acts only as a supervisory body, and is consulted in advance only in the case of Article 36 GDPR (high residual risk that cannot be mitigated, identified by the DPIA).

  Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)

• Valid legal basis for the processing (Article 6 GDPR)

  Japåkrevd

  A legal basis is required. Note: after the CJEU judgment C-34/21 of 30 March 2023, section 26 BDSG is no longer sufficient on its own as a standalone basis; the processing must be grounded directly on Article 6 GDPR (e.g. performance of the contract, legal obligation, legitimate interest with a balancing test). A possible dedicated law (Beschäftigtendatengesetz) is under discussion but does NOT appear to be in force.

  Garante del Baden-Württemberg, FAQ sulle basi giuridiche dei dati dei dipendenti (sentenza CGUE C-34/21)

• Privacy notice to workers (Article 13 GDPR)

  Japåkrevd

  Workers must be clearly informed about which location data is collected, how, when and why.

  Regolamento UE 2016/679 (GDPR)

• Prohibition of continuous tracking (data minimisation, Article 5 GDPR)

  Japåkrevd

  The German authority is clear: systems that allow permanent monitoring of employees are in principle unlawful, and workers must not be exposed to constant monitoring pressure. Location is collected only when it serves a legitimate purpose (e.g. safety of a lone worker, protection of the cargo), not continuously.

  Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti

• Data protection impact assessment (DPIA) for the geolocation of employees

  Japåkrevd

  The geolocation of employees is expressly on the DSK list of processing operations that require a data protection impact assessment (Article 35 GDPR). It must be carried out before activating the system.

  Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)

• Datatilsynet i delstaten der virksomheten har sitt sete

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  Germany is federal: for private companies the supervisory authority is the data protection authority of the Land where the company is based (16 authorities), not the federal commissioner. Examples: Bavaria BayLDA, Berlin BlnBDI. The official list is on the BfDI website.

  Verifisert den 15. juni 2026

• BfDI, elenco delle autorità dei Land (per trovare la tua)

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

  Verifisert den 15. juni 2026

• BayLDA (esempio, Baviera)

  https://www.lda.bayern.de/de/index.html

  https://www.lda.bayern.de/de/index.html

  Verifisert den 15. juni 2026

• Betriebsverfassungsgesetz, § 87 (cogestione del consiglio aziendale)
• Bundesdatenschutzgesetz, § 26 (dati dei lavoratori)
• Garante del Baden-Württemberg, FAQ sulle basi giuridiche dei dati dei dipendenti (sentenza CGUE C-34/21)
• Regolamento UE 2016/679 (GDPR)
• Garante della Renania-Palatinato, guida sulla localizzazione GPS dei dipendenti
• Lista DSK dei trattamenti che richiedono una valutazione d'impatto (settore privato)
• BfDI, elenco delle autorità garanti per la protezione dei dati dei Land
• Garante di Amburgo, comunicato del 1 ottobre 2020 (sanzione H&M)
• BayLDA, autorità garante della Baviera
• BlnBDI, autorità garante di Berlino

Dette er en informasjonsressurs, ikke juridisk rådgivning. Før du tar i bruk et overvåkingssystem, bør du få situasjonen din vurdert av en fagperson.