{"id":193,"date":"2026-07-11T09:00:00","date_gmt":"2026-07-11T09:00:00","guid":{"rendered":"https:\/\/marcopolo.net\/blog\/general\/?p=193"},"modified":"2026-07-15T10:52:33","modified_gmt":"2026-07-15T10:52:33","slug":"gdpr-data-rights-truck-drivers-eu","status":"publish","type":"post","link":"https:\/\/marcopolo.net\/blog\/general\/gdpr-data-rights-truck-drivers-eu\/","title":{"rendered":"GDPR and Data Rights for Truck Drivers: What Fleets Can Legally Track"},"content":{"rendered":"<p>Your fleet can track your truck, but it can&#8217;t track you without limits. Under the GDPR (Regulation (EU) 2016\/679), your employer has to have a lawful reason to collect and process any data about you \u2014 including GPS location, tachograph records, dash cam footage, and driver behaviour scores. If they can&#8217;t justify it, they&#8217;re breaking the law, and you have the right to demand they stop. This guide breaks down exactly what fleets can legally monitor, what crosses the line, and how to enforce your rights.<\/p>\n<h2>What the GDPR Actually Covers for Drivers<\/h2>\n<p>The GDPR applies to any &#8220;personal data&#8221; \u2014 anything that can identify you. That&#8217;s your name, your driving licence number, your tachograph card data, your location when you&#8217;re behind the wheel, and even your face on a cab camera. Your employer is the &#8220;data controller,&#8221; which means they carry the legal responsibility for handling that data properly.<\/p>\n<p>For every piece of data they collect, they need one of six lawful bases under Article 6. In trucking, the ones that come up are usually:<\/p>\n<ul>\n<li><strong>Legal obligation<\/strong> \u2014 tachograph data must be recorded and stored under Regulation (EU) 165\/2014. You can&#8217;t refuse this.<\/li>\n<li><strong>Contract<\/strong> \u2014 data needed to actually pay you and run the job, like delivery confirmations.<\/li>\n<li><strong>Legitimate interest<\/strong> \u2014 this is where most fleet tracking sits, and it&#8217;s the most contested. The employer must prove their interest outweighs your privacy.<\/li>\n<\/ul>\n<p>Here&#8217;s the key point: &#8220;consent&#8221; is almost never valid between an employer and employee. The European Data Protection Board has stated that because you depend on your job, you can&#8217;t freely give or refuse consent. So if your company hands you a form saying &#8220;I consent to GPS tracking,&#8221; that form is legally weak. They need a real basis instead.<\/p>\n<h2>What Fleets Can Legally Track<\/h2>\n<p>Plenty of monitoring is lawful and you won&#8217;t win a fight against it. Fleets have a genuine interest in vehicle safety, cargo security, and fuel costs. Here&#8217;s what generally holds up:<\/p>\n<table>\n<thead>\n<tr>\n<th>Data type<\/th>\n<th>Usually legal?<\/th>\n<th>Condition<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>GPS location during working hours<\/td>\n<td>Yes<\/td>\n<td>Must serve fleet logistics, not personal surveillance<\/td>\n<\/tr>\n<tr>\n<td>Tachograph records (driving\/rest times)<\/td>\n<td>Yes<\/td>\n<td>Legal obligation under EU 165\/2014<\/td>\n<\/tr>\n<tr>\n<td>Fuel consumption per trip<\/td>\n<td>Yes<\/td>\n<td>Cost management is a legitimate interest<\/td>\n<\/tr>\n<tr>\n<td>Harsh braking \/ speeding alerts<\/td>\n<td>Often<\/td>\n<td>Only if tied to road safety, not individual ranking<\/td>\n<\/tr>\n<tr>\n<td>GPS during rest periods or off-duty<\/td>\n<td>No<\/td>\n<td>Once you clock off, tracking generally stops being lawful<\/td>\n<\/tr>\n<tr>\n<td>Continuous audio recording in cab<\/td>\n<td>No<\/td>\n<td>Disproportionate; almost never justified<\/td>\n<\/tr>\n<tr>\n<td>Inward-facing dash cam (your face)<\/td>\n<td>Rarely<\/td>\n<td>Only in narrow, documented safety cases<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The dividing line is <strong>proportionality<\/strong>. A fleet can know where the truck is during a delivery. It cannot log your movements at 2am when you&#8217;re parked at a rest area on the A6 in France having your daily rest. If the tracking continues while you&#8217;re off duty, that&#8217;s a breach.<\/p>\n<h2>Where Fleets Cross the Line<\/h2>\n<p>Some monitoring practices routinely violate the GDPR, and drivers rarely realise they can challenge them:<\/p>\n<ul>\n<li><strong>Permanent inward cameras.<\/strong> A camera pointed at your face all shift is treated as excessive by most data protection authorities. In 2021, the Spanish authority AEPD fined companies for driver-facing cameras that recorded continuously. Event-triggered footage (only saving clips around a hard brake) is easier to justify; constant recording is not.<\/li>\n<li><strong>Tracking during rest.<\/strong> If your employer pulls your location while you&#8217;re taking your 45-hour weekly rest, that data has no lawful purpose.<\/li>\n<li><strong>Secret monitoring.<\/strong> Article 13 requires the fleet to tell you in advance exactly what they collect, why, how long they keep it, and who they share it with. Hidden GPS or undisclosed apps are illegal by default.<\/li>\n<li><strong>Using safety data for discipline in secret.<\/strong> If a &#8220;driver score&#8221; app is quietly used to deny you shifts or affect your pay, and you were never told, that&#8217;s an unlawful purpose.<\/li>\n<\/ul>\n<p>Undisclosed monitoring also feeds into pay disputes. If a company uses tracking data selectively \u2014 counting some hours and not others \u2014 that can distort your wages. It&#8217;s worth reading up on <a href=\"https:\/\/marcopolo.net\/blog\/general\/dispute-unpaid-wages-truck-driver-eu\/\">how to dispute unpaid wages as a truck driver in the EU<\/a> if the numbers don&#8217;t add up.<\/p>\n<h2>Your Rights Under the GDPR<\/h2>\n<p>You have concrete rights you can use, and they cost nothing to exercise. The main ones:<\/p>\n<ol>\n<li><strong>Right of access (Article 15).<\/strong> You can ask your employer for a copy of all personal data they hold on you. They must respond within one month, free of charge.<\/li>\n<li><strong>Right to rectification (Article 16).<\/strong> If your tachograph data or driver record has an error, you can demand correction.<\/li>\n<li><strong>Right to erasure (Article 17).<\/strong> You can ask them to delete data that&#8217;s no longer needed \u2014 though tachograph records are exempt because law requires their retention.<\/li>\n<li><strong>Right to object (Article 21).<\/strong> If tracking is based on &#8220;legitimate interest,&#8221; you can object, and they must stop unless they prove overriding grounds.<\/li>\n<li><strong>Right to lodge a complaint (Article 77).<\/strong> You can go straight to your national data protection authority \u2014 Germany&#8217;s BfDI, France&#8217;s CNIL, Spain&#8217;s AEPD, or the equivalent in your country.<\/li>\n<\/ol>\n<p>To make an access request, send a written message (email is fine) to your employer stating you&#8217;re making a &#8220;Subject Access Request under Article 15 GDPR.&#8221; Keep a copy. If they ignore you past 30 days, that itself is a violation.<\/p>\n<h2>What Penalties Fleets Face for Getting It Wrong<\/h2>\n<p>The GDPR carries serious fines, and this matters because it gives you leverage. Data protection authorities can impose penalties up to <strong>\u20ac20 million or 4% of a company&#8217;s global annual turnover<\/strong>, whichever is higher, for serious breaches.<\/p>\n<p>Real examples show authorities do act. The Hungarian authority has fined logistics firms for excessive employee GPS tracking. The Spanish AEPD has issued penalties in the tens of thousands of euros for unlawful vehicle monitoring. Even smaller regional fines \u2014 \u20ac5,000 to \u20ac50,000 \u2014 are common for undisclosed tracking.<\/p>\n<p>For you, the practical value isn&#8217;t the fine itself. It&#8217;s that raising a documented GDPR concern forces a company to justify its practices, and most can&#8217;t fully justify overreach. A well-worded complaint often gets the surveillance rolled back faster than any grievance procedure.<\/p>\n<blockquote><p>Keep your own records. A copy of your CMR paperwork, your route notes, and screenshots of any tracking app the company makes you use are your evidence if a dispute starts.<\/p><\/blockquote>\n<p>Data rights connect to the wider set of protections you already have. If you want the full picture of the legal ground you stand on, see <a href=\"https:\/\/marcopolo.net\/blog\/general\/your-rights-as-a-truck-driver-in-the-eu-what-the-law-says\/\">your rights as a truck driver in the EU<\/a>. And because tachograph data is the one form of tracking you can&#8217;t refuse, it pays to know the rules cold \u2014 check the <a href=\"https:\/\/marcopolo.net\/blog\/general\/tachograph-rules-2026-what-every-truck-driver-needs-to-know\/\">tachograph rules for 2026<\/a>.<\/p>\n<h2>Frequently Asked Questions<\/h2>\n<h3>Can my employer track my truck when I&#8217;m on my rest period?<\/h3>\n<p>Generally no. Once you&#8217;re off duty, GPS tracking of your location loses its lawful basis. Fleet interest covers operational hours and cargo security, not your private movements during a 45-hour weekly rest. If your company logs your position while you&#8217;re parked and resting, you can object under Article 21 and complain to your national data protection authority.<\/p>\n<h3>Do I have to accept a camera pointed at my face in the cab?<\/h3>\n<p>In almost all cases, no. Continuous inward-facing cameras are treated as disproportionate by authorities like Spain&#8217;s AEPD and Germany&#8217;s data regulators. Event-triggered systems that only save a short clip around a safety incident are easier to justify. If your fleet installs a constantly recording driver camera without a documented, narrow safety reason, it&#8217;s likely unlawful.<\/p>\n<h3>How do I get a copy of the data my fleet holds on me?<\/h3>\n<p>Send a written Subject Access Request citing Article 15 GDPR. Your employer must provide all personal data they hold \u2014 GPS logs, driver scores, camera footage, tachograph records \u2014 within one month and free of charge. If they fail to respond, that missed deadline is itself a GDPR breach you can report.<\/p>\n<h3>Can tracking data be used to cut my pay?<\/h3>\n<p>Only if you were told in advance that it would be used that way and there&#8217;s a lawful basis. Secretly using driver-behaviour scores or GPS data to reduce shifts or wages violates the transparency rules in Article 13. If your pay looks wrong, gather the data and review the process for disputing it.<\/p>\n<p>Wherever your route takes you across<\/p>\n<p><!-- related-guides-auto --><\/p>\n<div class=\"related-guides\" style=\"margin-top:2.5rem;padding-top:1.5rem;border-top:1px solid #e0e0e0\">\n<h3 style=\"font-size:1.05rem;font-weight:700;margin-bottom:0.8rem\">Related guides for drivers<\/h3>\n<ul style=\"margin:0;padding-left:1.2rem;line-height:1.9\">\n<li><a href=\"https:\/\/marcopolo.net\/blog\/general\/cmr-waybill-guide-truck-drivers\/\">CMR Waybill Explained: How to Fill It Out and Avoid Penalties<\/a><\/li>\n<li><a href=\"https:\/\/marcopolo.net\/blog\/general\/driver-cpc-requirements-2026\/\">Driver CPC Requirements 2026: Periodic Training and Digital CPC Cards<\/a><\/li>\n<li><a href=\"https:\/\/marcopolo.net\/blog\/general\/eu-driving-hours-explained-complete-guide-to-ec-561-2006\/\">EU Driving Hours Explained: Complete Guide to EC 561\/2006<\/a><\/li>\n<li><a href=\"https:\/\/marcopolo.net\/blog\/general\/tachograph-rules-2026-what-every-truck-driver-needs-to-know\/\">Tachograph Rules 2026: What Every Truck Driver Needs to Know<\/a><\/li>\n<\/ul>\n<\/div>\n<p><!-- \/related-guides-auto --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Your fleet can track your truck, but it can&#8217;t track you without limits. Under the GDPR (Regulation (EU) 2016\/679), your employer has to have a lawful re&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"GDPR and Data Rights for Truck Drivers: What Fleets Can Legally Track - Marco Polo Mobile: eSIM for Truck Drivers","description":"Your fleet can track your truck, but it can't track you without limits. Under the GDPR (Regulation (EU) 2016\/679), your employer has to have a lawful re..."},"footnotes":""},"categories":[3],"tags":[],"class_list":["post-193","post","type-post","status-publish","format-standard","hentry","category-regulations"],"_links":{"self":[{"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/posts\/193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/comments?post=193"}],"version-history":[{"count":2,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/posts\/193\/revisions"}],"predecessor-version":[{"id":226,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/posts\/193\/revisions\/226"}],"wp:attachment":[{"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/media?parent=193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/categories?post=193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/marcopolo.net\/blog\/general\/wp-json\/wp\/v2\/tags?post=193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}