GPS Clock-In Compliance for Canadian Trades Businesses: What You Need to Know

Which Laws Apply to GPS Employee Tracking in Canada?

PIPEDA (federal) — Applies to federally regulated businesses (banks, telecoms, interprovincial transport). Requires consent, transparency, and limited data collection.

Provincial privacy laws — Ontario, BC, Alberta, and Quebec each have their own private sector privacy legislation. Quebec's Law 25 (2023 update) is the most strict.

Employment Standards Acts — Each province's ESA governs record-keeping requirements for hours worked — which GPS data can help you satisfy.

The 4 Compliance Requirements

1. Inform employees — Before using GPS tracking, employees must be told: what data is collected, why, how it's used, and how long it's kept.

2. Get consent — For most provinces, written acknowledgment in the employment agreement or a standalone GPS monitoring policy is sufficient.

3. Limit collection — Collect only what you need. For payroll, this means GPS location at clock-in/out — not continuous all-day tracking.

4. Protect the data — Ensure GPS data is stored securely and only accessible to authorized personnel (managers, payroll admin).

What to Include in Your GPS Monitoring Policy

A simple, one-page policy should cover:

• Purpose of GPS monitoring (payroll verification and job site confirmation)
• What data is collected (location coordinates at clock-in/out)
• Who has access to the data
• How long data is retained (match your payroll records retention period)
• Worker rights to access their own data

Have employees sign off on this policy before they use ClockInProof.

Quebec-Specific Rules (Law 25)

Quebec's updated privacy law (Bill 64, Law 25) requires additional disclosures for any technological monitoring of employees. Key additions:

• Explicit written notice before monitoring begins
• Privacy impact assessment if collecting sensitive data
• Appointment of a Chief Privacy Officer (for larger organizations)

For small and medium trades businesses using GPS only at clock-in, a clear written policy + employee sign-off is typically sufficient.