Two questions arrive from opposite directions but land on the same legal framework. Employers ask: "Can I install GPS trackers on my fleet vehicles?" Employees ask: "Is my employer tracking me without telling me?" The answer to both depends on the same three conditions and the same law. This post explains what Senegalese law requires, what each party is entitled to do, and what to do when the rules are not being followed.
For GPS tracking in a personal or family context rather than a professional one, see: Is it legal to track a spouse's car by GPS in Senegal?
The Legal Framework: Law 2008-12 and the CDP
Senegal's data protection law is Law no. 2008-12 of January 25, 2008 on the protection of personal data. It created the Commission de Protection des Donnees Personnelles (CDP), the independent supervisory authority responsible for enforcement. The CDP is Senegal's equivalent of France's CNIL.
GPS location data falls squarely within the scope of this law. A position log is not neutral technical information: it reveals where a person was, at what time, for how long, and in what direction they traveled. When a vehicle is assigned to a named driver, this data can directly or indirectly identify a natural person. It is therefore protected personal data.
The four fundamental principles the CDP applies to employee geolocation are:
- Legitimate purpose: tracking must serve a specific, documented objective (safety, route optimization, verification of working hours)
- Proportionality: data collected must be limited to what is strictly necessary for that objective
- Transparency: employees must be informed in writing before the system is activated
- Security: location data must be protected against unauthorized access and restricted to those who need it
Any employee who believes their employer is not respecting these principles can file a complaint with the CDP.
The Short Answer for Employers
Yes, GPS tracking of employee vehicles is legal in Senegal, provided three conditions are met:
- The employee has been informed in writing, before installation
- The vehicle is a company vehicle owned by the business
- Tracking is limited to working hours and professional use
If any one of these conditions is not met, the tracking is illegal.
Company Vehicle vs Personal Vehicle: A Fundamental Distinction
The most important distinction in Senegalese law is between a vehicle owned by the company and a vehicle owned by the employee.
Company vehicle during working hours. This is the baseline case. The employer owns the vehicle and has the authority to monitor it during professional hours, provided employees have been informed in writing beforehand. No authorization from the employee is required, only prior written notification.
Company vehicle tracked around the clock. This remains legal, but only if permanent tracking is explicitly mentioned in the information notice given to employees. The notice must state that tracking is active outside working hours and on what basis (on-call duty, permanent vehicle assignment).
Personal vehicle used for work. If the vehicle belongs to the employee, even if it is used for professional travel with mileage reimbursement, the situation changes entirely. Explicit written consent from the employee is mandatory. Without this consent, installing a GPS tracker on an employee's personal vehicle is unlawful regardless of whether the vehicle is used during working hours. Even with consent, tracking must be strictly limited to professional trips.
Outside working hours for a company vehicle. Monitoring movements outside professional hours requires strong justification: on-call duty, permanent vehicle assignment, or a documented operational need. This justification must be specified in the information notice. It cannot be applied retroactively.
What the Employer Can Do
| What Is Permitted | Required Conditions |
|---|---|
| Live tracking of a company vehicle | Employee informed in writing, professional use |
| Accessing trip history | Limited to working hours |
| Configuring geofencing alerts | Tied to the professional mission |
| Verifying mileage and stops | Within fleet management scope |
| Sending speeding alerts | For road safety of drivers |
| Using data in disciplinary proceedings | Employee informed beforehand, data from working hours |
What the Employer Cannot Do
| What Is Forbidden | Reason |
|---|---|
| Tracking an employee without their knowledge | Violation of Law 2008-12 |
| Tracking a personal vehicle without explicit written consent | Serious breach of privacy |
| Monitoring movements outside working hours without documented justification | Outside the legitimate professional scope |
| Using GPS data collected without prior notice in disciplinary proceedings | Evidence inadmissible, proceeding void |
| Sharing location data with third parties without legal basis | Violation of the CDP framework |
| Retaining data indefinitely | Retention must be limited to the declared purpose |
One point deserves emphasis: a dismissal based on GPS data collected without prior written notice to the employee can be challenged and voided. The absence of a prior information notice does not just create a CDP compliance risk. It invalidates the evidentiary value of the data in labor proceedings.
The 4 Compliance Conditions for Employers
1. Inform Employees Before Installation
The notice must be written, individual, and delivered before the tracking system is activated. It must include:
- The purpose of the tracking (route monitoring, verification of working hours, driver safety, accident documentation)
- The data collected (GPS position, speed, distance, timestamps)
- The data retention period
- Who has access to the data (HR, operations manager, specific supervisors)
- The employee's rights (access, correction, objection)
An addendum to the employment contract or a signed internal memo is the most legally sound form. A verbal announcement or a general mention in the company handbook is insufficient.
2. Define a Legitimate and Documented Purpose
Legitimate uses recognized under the CDP framework include:
- Route optimization and mission assignment
- Verification of working hours and declared mileage
- Driver and cargo safety
- Evidence in case of accident, theft, or customer dispute
- Preventive maintenance management
Forbidden: using geolocation to sanction an employee for activity outside working hours, or for a purpose not mentioned in the initial information notice. The purpose must be stated before tracking begins, not invented after an incident.
3. Limit Data to What Is Strictly Necessary
If the objective is expense reimbursement verification, there is no need for position history accurate to the meter or updates every 10 seconds. If the objective is driver safety, updates every 60 seconds may be sufficient. Collect only what the stated purpose actually requires.
This principle matters practically. The CDP can assess whether the data volume collected is proportionate to the declared purpose. Overcollection is itself a compliance violation.
4. Secure Access to Data
Location data is personal data. Access must be restricted to staff whose role justifies consulting it. A driver must not be able to view a colleague's trips. Access logs must be maintained.
Traxelio supports granular role configuration: administrator, fleet manager, driver. Each role sees only the data relevant to their function. This access structure is the minimum expected by the CDP framework.
For Employees: How to Know If You Are Being Tracked
Visible Signs
- A discreet device under the dashboard, in the trunk, or magnetically attached under the chassis
- An unusual cable plugged into the OBD port (under the dashboard on the driver's side, accessible without tools)
- An application installed on your work phone requesting permanent location access
How to Check
- Inspect the OBD port: it should be empty or contain only the manufacturer's original dongle
- Look under the dashboard and in the trunk for a hardwired device with unusual electrical connections
- Check the undercarriage and wheel arches for magnetically attached devices
- An RF detector can pick up GSM emissions from an active tracking device
What to Do If You Suspect Illegal Tracking
-
First, check whether you received written notice from your employer about GPS tracking: employment contract, IT policy, addendum to your contract, or a signed service memo.
-
If yes: tracking is probably legal. The employer does not need your agreement for a company vehicle, only your written notification prior to activation.
-
If no: ask your employer in writing whether your vehicle is GPS-equipped, under what framework, and on what legal basis. A written request creates a formal paper trail that protects you regardless of how the employer responds.
-
If refused or if unauthorized tracking is confirmed: file a complaint with the CDP. The CDP can issue a formal notice, impose administrative fines, and order the employer to cease non-compliant tracking.
-
Preserve evidence: photos of the device or suspicious cable, screenshots of any relevant communications, copies of all written exchanges with your employer.
Compliance Guide for Employers (4 Steps)
Step 1: Draft the Information Notice
A single document covering five required elements: purpose, data collected, retention period, who has access, employee rights. Have each affected employee sign before any device is installed or activated.
Step 2: Formalize the Vehicle Use Policy
Include GPS tracking rules in your internal regulations or a dedicated vehicle charter: active tracking hours, whether private use is permitted outside working hours, and the conditions under which history logs can be accessed. The more explicit the policy, the less exposure you carry in a dispute.
Step 3: Configure Access Permissions in Your Fleet Software
Define who can see what. In Traxelio, granular permissions allow different visibility by role: some managers see the full fleet, others only their assigned vehicles, and drivers access only their own history. This configuration is not optional under the CDP framework: it is a requirement.
Step 4: Set the Data Retention Period
Decide how long trip history is retained. 90 to 180 days is generally sufficient for common uses: dispute resolution, working hours verification, mileage billing. Retention beyond 180 days must be justified by a specific documented purpose and stated in the initial information notice.
Frequently Asked Questions
Can an employee refuse GPS tracking on a company vehicle?
For a company vehicle during working hours, an employee's refusal does not prevent the employer from deploying the system, provided the prior written notice requirement has been met. GPS tracking of company property falls within the employer's management authority. The employee can exercise their right of access to their own personal data, but cannot block the system itself.
Must the system be declared to the CDP?
Law 2008-12 provides for a declaration or authorization regime with the CDP for certain personal data processing activities. Employee geolocation is considered a sensitive form of processing that may require a prior declaration before activation. Consulting a legal advisor or contacting the CDP directly is the recommended approach to confirm the obligations applicable to your specific situation.
Can GPS data be used in disciplinary proceedings?
Yes, if three conditions are met: the data was collected legally, the employee was informed beforehand, and the behavior at issue occurred during working hours. GPS data collected without prior notice is inadmissible and can render the entire disciplinary proceeding void.
What penalties does a non-compliant employer face?
CDP formal notice, administrative fines, voided disciplinary sanctions based on illegally collected data, and employee lawsuits. Beyond sanctions, a poorly governed tracking system creates distrust that harms driver retention. The same system, implemented transparently, reinforces trust and protects both parties.
Compliance is not an obstacle to effective fleet management. It is a protection for both sides: employers can use legally collected data as valid evidence in disputes, and employees can work in a framework where monitoring is bounded by documented rules. A system that respects the law serves everyone better than one that operates in the dark.