Free Telematics Privacy Notice Template

Not necessarily. For company vehicles, the legal basis is usually "legitimate interests" rather than consent. You have a legitimate interest in managing your fleet, protecting assets, and ensuring driver safety. You still need to inform drivers through a privacy notice, but you don't need their permission.

Driver-facing cameras are more sensitive because they directly monitor the employee. You still don't need consent if there's a legitimate business reason (safety monitoring, insurance requirements), but you should explain clearly in your privacy notice why driver-facing footage is necessary.

Keep data only as long as you need it for the purpose it was collected. GPS location data might be kept for a few weeks or months. Dash cam footage is often kept for 30-90 days unless an incident occurs. Your privacy notice should state your retention periods.

Yes. Under GDPR, employees have a right to access personal data you hold about them. This includes GPS location history, driving behaviour scores, and any footage where they're identifiable. Your privacy notice should explain how drivers can make a subject access request.

You're still the data controller. Your privacy notice should mention that data is processed by third parties and name them (or describe their role). You need a data processing agreement with your telematics provider.