Is Geolocation Time Tracking Legal in Spain? What the Law Says in 2026

Is Geolocation Time Tracking Legal in Spain?

Short answer: yes, it’s legal. Companies can use geolocation for employee time tracking as long as they comply with the GDPR and have a legitimate justification.

That said, there are important nuances—especially with the changes introduced by the new time tracking regulation. Let us explain.

What the Law Allows (and What It Doesn’t)

✅ This IS Legal

1. Recording location at the moment of clocking in/out. When an employee taps the button to clock in, the system may store their GPS coordinates as supplementary data.

2. Point-in-time geolocation, not continuous tracking. The system accesses GPS only at the moment of clocking in—no constant surveillance.

3. Informational geofences. You can define geographic zones (offices, job sites, workplaces) and log whether the employee clocked in inside or outside of them.

4. Alerts for unusual locations. The system can notify managers when a clock-in occurs from an unexpected location.

❌ This Is NOT Legal (Already Today)

1. Continuous tracking without justification. Following an employee’s location throughout the day is only legal when travel is an essential part of the job (transport, delivery) and no less intrusive alternative exists.

2. Geolocation outside working hours. The system must never access an employee’s location outside their work schedule.

⚠️ This Will Become Illegal (Under the New Regulation)

1. Blocking clock-ins based on location. The new regulation states that clocking in must be “free”: employees cannot be prevented from logging their work hours because they’re outside a defined zone.

2. Automatic GPS-based clock-ins. Systems that clock in automatically when an employee enters a zone violate the principle of “personal and direct” clocking that the new regulation requires.

What Does the GDPR Say?

Location is protected personal data. To process it legally, a company must meet four requirements:

1. Legitimate legal basis. The most common is the employer’s legitimate interest (Art. 6.1.f GDPR) to verify the workplace.

2. Prior information to the employee. You must communicate what data is collected, for what purpose, how long it’s retained, and what rights the worker has.

3. Data minimization. Only strictly necessary data may be collected. If location at the moment of clocking is sufficient, continuous tracking isn’t justified.

4. Proportionality. Geolocation must be justified by the nature of the role: mobile teams, on-site work, remote work, etc.

What Changes with the 2026 Regulation?

The new time tracking regulation (currently in parliamentary process) establishes that each clock-in must be “free, personal, direct, and immediate.” In practice:

• Geofences: they could previously block clocking if the employee was outside the zone; now they can only inform, never block.
• Preventing clock-ins: the system could previously block them; now employees must always be able to clock in.
• Automatic clock-ins: some apps used to log hours automatically via GPS; now clocking in must be a voluntary action by the employee.

In short: geolocation moves from restrictive to informational. The system records where the clock-in happens, but cannot prevent it.

Want to learn more? Read our complete guide on geolocation time tracking with practical cases, AEPD recommendations, and key implementation tips.

What Does the AEPD Say?

The Spanish Data Protection Agency has established clear criteria:

• Continuous tracking is only admissible when travel is an essential part of the job.
• Tracking is not allowed if the employee works at a fixed location or less intrusive alternatives exist.
• Companies must ensure encryption, traceability, and timestamping of location data.
• Data must be stored securely and deleted when no longer needed (respecting the 4-year minimum required by law).

Can They Force Me to Clock In with GPS?

Yes, as long as your job justifies it (you travel, work outside a fixed location) and the company has informed you beforehand. Your explicit consent isn’t required: a legitimate legal basis and proportionate measure are sufficient.

What the company cannot do:

• Track you outside working hours.
• Use location data for purposes other than those declared.
• Prevent you from clocking in if you’re outside a zone.

How It Works in Cleverfy

Cleverfy includes geolocation in all plans, configured to comply with regulations from day one:

• Point-in-time geolocation. GPS is accessed only at the moment of clocking in.
• Informational geofences. You can define zones, but they never block clock-ins.
• Protected data. Encryption, traceability, and retention compliant with GDPR.
• Configurable per employee. Enable geolocation only for those who actually need it.

Try Cleverfy free — set up in 10 minutes.

Summary

• Is GPS clocking legal? Yes, with conditions.
• Can they track me all day? Only if the job justifies it.
• Can they block my clock-in based on location? Under the new regulation, no. Clocking in must be free.
• Must they inform me beforehand? Yes, it’s mandatory.
• Can they clock me in automatically via GPS? Under the new regulation, no. Clocking in must be a personal action.

---

Legal note: This article is informational and does not constitute legal advice. The time tracking regulation is currently in parliamentary process; its final content may vary.

---

More information: Complete Geolocation Time Tracking Guide · Spain’s Time Tracking Law 2026