GPS on Timesheets: What Is Legal in Australia?

Yes, GPS on timesheets can be legal in Australia, but not by default. Employers need a genuine work purpose, clear advance notice, proportionate tracking, secure data handling, and compliance with the surveillance, privacy and workplace laws that apply.

The tricky bit is that there is no single Australian GPS-at-work law. Commonwealth privacy and employment laws can apply, alongside different surveillance laws in each state and territory.

What lawful GPS timesheets usually look like

A GPS timesheet might record a worker’s location when they clock on or off. It might also use a geofence to confirm they are near the nominated site.

That is easier to justify than tracking someone continuously all day. Continuous tracking collects more information and creates a bigger privacy risk, particularly when a phone or vehicle is used outside work.

A sensible setup normally has these features:

• A clear business reason, such as verifying site attendance or allocating hours to the right project.
• Written notice before tracking starts.
• A policy explaining what is collected, when it is collected and who can see it.
• Tracking limited to work hours and work locations.
• A manual option when GPS is wrong, unavailable or unsafe to use.
• Restricted access and a defined deletion period.
• A process for workers to see and challenge their records.

Consent can help, but do not rely on a tick-box alone. In an employment relationship, consent may not be freely given. The safer question is whether the tracking is lawful, necessary, properly notified and proportionate to the work purpose.

The numbers employers should know

Several concrete rules affect GPS timesheets:

• In New South Wales and the Australian Capital Territory, existing workers generally need at least 14 days’ notice before workplace surveillance begins, as at August 2026. Different arrangements can apply to new starters and, in NSW, a shorter period may be agreed.
• Time and wage records generally need to be kept for 7 years under the Fair Work framework, as at August 2026. If GPS data forms part of the time record, decide whether it must be retained with that record.
• A private business with annual turnover above $3 million will generally fall within the federal Privacy Act, as at August 2026. Some smaller businesses are also covered because of what they do or how they handle personal information.
• For a serious or repeated privacy interference by a body corporate, the maximum penalty can be the greater of $50 million, 3 times the value of a benefit obtained, or, where that benefit cannot be determined, 30% of adjusted turnover during the relevant period, as at August 2026. That is not an automatic fine for a GPS mistake. It shows why careless handling of location data matters.

The Privacy Act has an employee-records exemption for some acts by private employers directly related to current or former employment relationships. It is not a blanket pass. It may not cover job applicants, subcontractors, unrelated uses or outside providers handling the data for their own purposes.

How the rules differ around Australia

This table is a starting point, not a substitute for checking the law where each worker is located.

Location	Main GPS surveillance position	Practical step
New South Wales	The Workplace Surveillance Act 2005 expressly covers tracking surveillance. Notice, policy and other conditions apply.	Give written notice, follow the policy and place a conspicuous notice on a tracked vehicle or object where required.
Australian Capital Territory	The Workplace Privacy Act 2011 regulates tracking surveillance and requires notice and consultation steps.	Consult workers, provide the required notice and identify tracked equipment.
Victoria	The Surveillance Devices Act 1999 restricts tracking devices, including through consent rules. Separate workplace privacy rules prohibit surveillance in certain private areas.	Obtain legal advice on consent and keep tracking away from private or off-duty activity.
Western Australia	The Surveillance Devices Act 1998 regulates the installation and use of tracking devices.	Check whether express or implied consent is legally sufficient for the proposed setup.
South Australia	The Surveillance Devices Act 2016 regulates tracking devices, with consent and lawful-interest pathways.	Document the lawful interest and why the tracking is reasonably necessary.
Northern Territory	The Surveillance Devices Act 2007 regulates tracking devices and includes consent-based restrictions.	Confirm the applicable consent and use requirements before activation.
Queensland and Tasmania	There is no equivalent general workplace GPS notice scheme matching NSW, but privacy, employment, contract and other surveillance rules can still apply.	Give clear notice anyway and check the current local law before rollout.

Public sector employers can face separate state or territory privacy legislation. Construction head contractors should also remember that employees, labour-hire workers and independent subcontractors may have different legal relationships.

Notice should explain what actually happens

Telling the crew that “the app uses location” is thin. The notice should say:

• whether location is captured only at clock-on and clock-off, or continuously
• whether background location is enabled
• whether a geofence is used and its approximate boundary
• whether supervisors can view live locations
• the purpose of collection
• who receives the data, including software providers
• how long it is retained
• how a worker can correct a wrong entry
• what happens when location permission is refused or unavailable

If the method changes, give fresh notice. A policy for clock-on location does not automatically cover continuous vehicle tracking six months later.

You can read more about setting up site records in the timesheets and site payroll hub. For checking how approved hours flow through to pay, use the timesheet and payroll calculator.

Do not track workers off the clock

Off-duty tracking is where many setups go wrong. A company phone may go home with the worker. A ute may be available for limited personal use. Background location can then reveal medical visits, union activity, religious attendance or family movements.

Configure the app so tracking stops outside the notified work period. If that is not technically possible, reconsider the tool or issue a separate work device that can be switched off.

Do not punish someone merely because their phone blocked location access. First check the policy, notice, employment terms, applicable award or enterprise agreement, and whether another reliable clock-on method was available.

GPS is evidence, not the final payroll answer

A location pin does not prove the exact time work started or finished. GPS can drift around large sites, basements, tunnels and high-rise projects. A worker may also start at a depot, collect materials or travel between sites during paid time.

Do not automatically trim a timesheet because the pin landed outside the fence. Give the worker and supervisor a correction process. Keep the original entry, the change, who approved it and the reason.

The same goes for meal breaks. A phone remaining inside a geofence does not prove that a break was taken. Payroll still needs to apply the relevant award, enterprise agreement, employment contract and Fair Work rules.

A practical pre-launch check

Before switching on GPS timesheets, write down the purpose and test whether less intrusive data would do the job. Map every place the location record goes. Check the law in each worker’s location. Consult where required. Then issue the notice and policy before collection starts.

Also set access permissions, retention periods and a data-breach response. Train supervisors not to use location data for unrelated curiosity or informal monitoring.

When in doubt, get advice on the exact app settings and workforce. The legality often turns on what the technology really records, not what the sales page calls it.