GPS Tracking Laws in California 2026
By: Ryan Horban
-
01
Penal Code 637.7 makes tracking a person without consent a misdemeanor in California
-
02
The registered owner, lessor or lessee is carved out. That exception does most of the work
-
03
Co-owned vehicles are the genuine gray area, and one 2021 case is the reason
-
04
Employers own more room on company vehicles, but written notice is the defensible standard
-
05
A statewide location privacy bill died in early 2026, and similar proposals will return
I'm Ryan Horban. For the last 15 years I've worked with GPS vehicle trackers, fleet tracking devices, and commercial GPS tracking systems. A good deal of it here in California.
California's rules are more specific than most states. One statute does the heavy lifting, and a handful of court decisions shape how it gets applied.
Here is where the line actually sits, and where it genuinely is not clear.
The statutePenal Code 637.7, and the exception that does the work.
Who can legally trackFive situations, and which one is unsettled.
Where it becomes a crimeThe line, and the civil exposure behind it.
Employer rulesMore room on company vehicles, with conditions.
The three casesAgnelli, Jones and Otonomo, and what each settled.
AB 1355The bill that died, and why it still matters.
Tracking a vehicle you own is legal in California. Installing a tracker on a vehicle you do not own is a misdemeanor under Penal Code 637.7. That is, without consent from the registered owner, lessor or lessee.
Employers generally have more room on company vehicles, because they are the owner or lessee. Written notice is still the defensible standard. Co-owned vehicles are the one genuine gray area.
Everything here assumes a vehicle you own or hold clear authority over. Putting a tracker on a partner's, an ex's or a family member's car is a crime in California. It can also escalate into stalking charges far heavier than 637.7 alone.
Found a tracker on your own vehicle and do not know who put it there? Photograph it in place and contact local law enforcement before removing it. Removing it tells the person you found it, which can escalate things. The National Domestic Violence Hotline is free and confidential on 1-800-799-7233, and SPARC publishes guidance for exactly this.
- USA based support
- Free US shipping
- Lifetime warranty
Real-time tracking with 3 second location updates
- Updates every 3 seconds. Live position while the vehicle is moving
- Plug and play. Into the OBD2 port under the dash, no tools
- Alerts and history. Speed and geofence alerts, a full year of trips
Penal Code 637.7, The Core Statute
California Penal Code 637.7 is the statute that governs GPS tracking in the state. It applies to individuals, businesses, employers and rental operators alike.
The rule itself is short. No person or entity may use an electronic tracking device to determine the location or movement of a person. Then subsection (b) carves out the exception that does most of the work.
Subsection (d) defines it as a device attached to a vehicle or other movable thing. It reveals location by transmitting electronic signals. That one word, attached, decides a surprising amount. Aftermarket hardware is covered. Equipment built in at the factory is a different question, as the Otonomo case below shows.
- The exception Consent from the registered owner, lessor or lessee takes the conduct outside the statute entirely.
- The other exception Lawful use by a law enforcement agency sits outside it too, on its own terms.
What a violation can cost:
- A misdemeanor charge for each violation
- Up to six months in county jail
- A fine of up to $1,000
- Civil damages under Penal Code 637.2, the greater of $5,000 per violation or three times actual damages
- Grounds for license revocation where the person tracking holds a professional license
Statutory civil damages a California court can award per violation. On top of any criminal penalty, and separate from actual damages.
Source: Cal. Penal Code 637.2 and 637.7
Worth sitting with that number. The civil exposure is the part most people never consider. It does not require anyone to be prosecuted first.
The statute dates to the late 1990s. Its legislative history points at a specific problem, private investigators fixing devices to other people's cars. How that language applies to shared cars and business fleets is what the courts have been working out since.
Who Can Legally Track A Vehicle
Ownership decides it. Here is how the common situations break down.
| Situation | Legal under 637.7 | What you need |
|---|---|---|
| Vehicle you own outright | Yes | Nothing beyond being the registered owner. Covers a teen driver's car titled in your name, a second family vehicle, or theft protection on your own car. |
| Vehicle you co-own | Unsettled | Written consent from every registered owner. One appellate division ruling found the statute unclear here, which is not the same as finding co-owner tracking lawful. |
| Company vehicle you own or lease | Yes | Written notice to the employees who drive it, ideally acknowledged in a handbook or onboarding form. |
| Rental vehicle in your own fleet | Yes | Disclosure in the rental agreement, so the renter knows before they drive away. |
| Someone else's personal vehicle | No | Consent from the registered owner, lessor or lessee. Without it, installing a tracker is a misdemeanor whatever your reason. |
Co-owned vehicles, the real gray area
People v. Agnelli (2021)
A husband in divorce proceedings placed a tracker on a vehicle he and his estranged wife still co-owned. He was charged, tried and convicted under 637.7. On appeal, the appellate division of a California superior court reversed. It held the statute unconstitutionally vague as applied to him. Neither the text nor the history says whose consent controls when a vehicle has two registered owners.
What it did NOT do: say co-owner tracking is legal. The finding was that the law fails to give clear notice in that situation. An appellate division of a superior court also does not bind courts statewide. Agnelli still faced separate charges for violating a protective order.
Read practically: co-owned tracking carries real uncertainty that tracking a car you own outright does not. Documented consent from every registered owner is the safer path by a wide margin.
Rental fleets
A rental company is the registered owner, so it can generally track a vehicle it rents out. Disclosure in the rental agreement is standard among major operators and reduces exposure. Our guide to the best OBD GPS tracker for rental cars covers device choice alongside those practices.
Where It Becomes A Crime
Installing a tracker on a vehicle you do not own is a misdemeanor. That means without consent from the owner, lessor or lessee. Your relationship to the owner does not change that, and neither does your reason.
- A tracker on a partner's or ex-partner's car without their knowledge
- A device on a friend's or adult family member's vehicle without asking
- Tracking a car registered solely to someone else, however good the intention
- Assuming that paying for the car, or driving it, carries the same rights as the registered owner
- Leaving a tracker in place after the owner has withdrawn consent
- Check the registration before you buy a device, not after you install one
- Written consent from every registered owner on a shared car
- Tell teen drivers the tracker is there. Legal, honest, and it works better anyway
- Employee and renter notice in writing, in something they sign or acknowledge
- Remove the device when ownership changes or consent is withdrawn
Tracking that crosses into monitoring a specific person can also engage California's stalking statutes. That is especially true with a current or former partner. Those carry their own, generally heavier, penalties. That is a different category of exposure from a standalone 637.7 charge.
Employer Rules
Employers tracking company-owned vehicles stand on firmer ground than an individual tracking someone else's car. The employer is usually the registered owner or lessee, which falls inside the 637.7(b) exception. California practice still pushes hard toward transparency.
- Written notice Tell employees in writing that company vehicles carry tracking, and keep the acknowledgement.
- Company vehicles only An employee's personal car needs separate, documented consent. Do not assume the policy covers it.
- Mind the hours Off-hours monitoring is where employer cases start, and it matters most on take-home vehicles.
- Say what it is for State the purpose and how long you keep the data. Vagueness is what turns a policy into a dispute.
Location tracking through work-issued phones sits in the same policy area even though it is not a dedicated tracker. Our guide on OBD GPS trackers for company cars goes deeper on notice and privacy.
The California customers who end up in trouble almost never set out to break a law. What I see is somebody who paid for the car, or drives it daily, assuming that settles it. The registration settles it. Pull the title and read whose name is on it. If there is a second name, get that person to say yes in writing first.
The Three Cases That Shape It
United States v. Jones
Police tracked a suspect's vehicle for 28 days. The Supreme Court held that attaching the device and monitoring movements was a Fourth Amendment search. The rationale was trespass.
Two details get misreported constantly. Investigators did have a warrant, but installed the device after it expired and in the wrong jurisdiction. And the Court expressly left open whether this kind of search always requires one.
Why it matters less here than people think: Jones governs government conduct. The Fourth Amendment restrains state actors, not private citizens. A private person's exposure comes from 637.7, the stalking statutes and civil privacy claims instead.
Mollaei v. Otonomo
A California driver sued the data broker Otonomo under 637.7. The claim was that it collected and resold location data from telematics units built into cars at the factory. The complaint was dismissed, and in April 2025 the Ninth Circuit affirmed.
The reasoning turned on that one word from the definition. A unit installed during manufacturing is part of the vehicle, not a device attached to it. So it falls outside 637.7 entirely.
The takeaway runs opposite to the headline. Rather than expanding the statute to cover connected-car data, the courts narrowed it to the legislature's original target. OBD2 plug-ins, magnetic trackers and hardwired units are squarely covered. Factory telematics sit in a separate lane.
AB 1355, The Bill That Stalled
Assembly Bill 1355 was introduced in February 2025 by Assemblymember Chris Ward. Known as the California Location Privacy Act, it would have restricted how businesses collect, use and sell location data. Phone and app data through to connected vehicles.
As proposed, covered businesses would have had to:
- Collect location data only where necessary to deliver something the person actually requested
- Give clear notice at the point of collection
- Publish a location privacy policy with retention limits
- Face civil penalties, including Attorney General enforcement
AB 1355 was filed with the Chief Clerk on 2 February 2026 and died with the session. Ward had already tried a second route in June 2025, amending similar language into AB 322. This policy area is not finished.
Nothing in AB 1355 would have changed the rules for an individual tracking their own car. It targeted businesses monetizing location data at scale, which is a different problem from a parent and a teenager.
Staying On The Right Side Of It
- Confirm ownership first Check the registration before you buy a device. Only track vehicles you own, co-own or hold documented authority over.
- Get consent in writing Given the gap Agnelli left open, your own stake is not enough when a second name appears.
- Notify employees and renters A short written disclosure protects you and sets expectations before anyone drives the vehicle.
- Never another person's car This is the fastest route from a private disagreement into a criminal charge. It can pull in the stalking statutes too.
- Keep the paperwork Rental agreements, handbooks and signed consent forms all help establish that tracking was disclosed and authorized.
The Bottom Line
California's law is more specific than most states. The core rule is still short enough to hold in your head. Track vehicles you own. Get consent when you do not. Give notice when tracking touches employees, renters or a shared car.
Agnelli left genuine uncertainty around co-owned vehicles. Otonomo confirmed that 637.7 aims at aftermarket devices rather than factory telematics. AB 1355 signals that legislators are watching location data generally, even though that bill died.
Where people run into trouble is almost never a decision to break the law. It comes from assuming that paying for a car grants tracking rights. Or from skipping consent on a shared one. Get ownership and consent right and this is straightforward.
GPS tracking laws are subject to change, so use this article as a guide and not a legal document. If you are worried you might be doing something illegal, speak to a lawyer.
This guide is general information and is not a substitute for advice from a licensed California attorney. Statutes change, court decisions shift, and how any rule applies to your situation can vary. If you are unsure whether your tracking plans are lawful, talk to a lawyer before installing a device.
Sources
- California Penal Code 637.7, electronic tracking devices
- People v. Agnelli, Cal. Super. Ct. App. Div. (2021)
- United States v. Jones, 565 U.S. 400 (2012)
- Mollaei v. Otonomo Inc., class action complaint
- Mollaei v. Otonomo Inc., Ninth Circuit memorandum, 22 April 2025
- California Legislature, AB 1355 text and status

Konnect plugs into the car titled in your name. Three-second real-time location, speed and geofence alerts, a full year of trip history. $39.00 from $99.00, with a lifetime warranty and USA-based support.
As an Amazon Associate, Konnect GPS earns from qualifying purchases.
About the Author
Over the past 15+ years, I’ve worked with rental operators, fleet managers, Turo hosts, small business owners, and everyday vehicle owners researching how GPS tracking laws apply in real-world situations. My work focuses on practical GPS compliance, vehicle tracking technology, fleet monitoring systems, theft recovery tools, and privacy-related tracking regulations across the United States.
For this guide, I reviewed California Penal Code § 637.7, AB 984 employer tracking requirements, CCPA geolocation privacy rules, relevant California court decisions, and current Turo disclosure policies to explain how GPS tracking laws are applied in California in 2026.
My goal is simple: make complex GPS tracking laws easier to understand so businesses and individuals can stay compliant while still protecting their vehicles, drivers, and property.
Frequently Asked Questions
On company-owned vehicles, undisclosed tracking may be technically permissible in some states but creates legal risk in most. New York Civil Rights Law §52-c, Connecticut Public Act 98-142, and Delaware Code Title 19 §705 each require written notice before electronic monitoring begins. California requires a separate written consent that cannot be bundled into a standard employment agreement. In New Jersey, Indiana, and Nevada, advance employer notice became a statutory requirement between 2021 and 2023. The cleanest approach in any state is a written notice before activation, with a signed acknowledgement on file.
Yes, and many fleet operators do. The requirement is that your policy must explicitly state that monitoring is continuous, around the clock, seven days a week, on all company-owned vehicles. Courts have generally held that employees have no reasonable expectation of privacy in company-owned assets, but several arbitration panels have required employers to prove the employee was clearly informed of 24/7 monitoring before discipline tied to off-hours data can be upheld. Vague language like "during business use" creates the gap that gets challenged.
Placing a GPS tracker on a vehicle you don't own exposes your business to criminal and civil liability in nearly every state. Texas Penal Code §16.06 classifies it as a Class A misdemeanour. California Penal Code §637.7 makes it a misdemeanour on the first offence and a felony on repeat violations. Michigan and Tennessee have similar statutes. Keep all tracking on company-titled assets only, and document that boundary explicitly in your policy scope section.
Standard practice in fleet operations is 30 to 90 days for routine operational data. If your business uses GPS records for customer billing verification, most contracts allow billing disputes within 60 to 90 days, so retention should at a minimum match that window. For fleets subject to FMCSA regulations, some driver activity records must be retained for six months under 49 CFR Part 395. Define the specific retention period in your written policy before data collection begins, not after a dispute arises.
For multi-state operations, yes, at least once. GPS tracking statutes changed in at least five states between 2021 and 2024 based on the NCSL index, and several states have pending legislation. A one-time legal review covering each state where drivers operate, followed by an annual internal check against the NCSL tracker, is a practical approach for most businesses. The cost is a fraction of a single wage-and-hour or privacy dispute over undisclosed monitoring.