Geofencing Time Clocks: How They Work and Whether They're Legal

By Nicole Hullihen, former SaaS Chief Operating Officer and Microsoft MVP · Updated October 13, 2026

Quick Answer

A geofencing time clock uses a phone's location to allow clock-ins only inside a virtual boundary around a job site or workplace. It's generally legal for employers to use on work time, but some states require notice of electronic monitoring, and California's privacy law treats precise location as sensitive information. Tell employees in writing what's collected and when, collect location only at punches or during work hours, and make sure geofence rules never stop employees from being paid for time they actually worked.

If you have employees who start their day at a job site, a client's home or one of several locations, you've probably dealt with the same questions: Were they actually there when they clocked in? Did they clock in from the parking lot of the coffee shop down the street? A geofencing time clock answers those questions automatically by checking the employee's location at the moment they punch in or out.

This guide explains how geofencing works, how it differs from GPS tracking, the laws that apply and how to set it up so it's accurate, fair and defensible.

Note: This is general information, not legal advice. Privacy and monitoring laws vary by state and are changing quickly, so confirm the rules where your employees work. Last checked October 13, 2026.

What Is a Geofencing Time Clock?

A geofence is a virtual boundary drawn on a map, usually a circle with a set radius around an address, such as 300 feet around a store or a job site. A geofencing time clock is a mobile time clock app that uses the phone's location services to check whether the employee is inside that boundary when they clock in or out.

Depending on how it's set up, the app can:

Block punches outside the geofence, so employees can only clock in once they arrive.
Allow punches anywhere but flag the ones outside for manager review.
Send a reminder to clock in when an employee arrives at the site, or to clock out when they leave.
Record the location of each punch so managers can see where it happened.

Geofencing vs. GPS Tracking

The two are often confused, but they collect very different amounts of information.

	Geofencing at punch	Continuous GPS tracking
What's collected	Location at the moment of clock-in and clock-out	Location at intervals throughout the shift
Main purpose	Confirm the employee was at the right place	Track routes, mileage or field activity
Privacy impact	Lower	Higher
Typical users	Retail, restaurants, cleaning, home care, construction	Delivery, field service, transportation
Off-duty risk	Low, if location is collected only at punches	Higher, if tracking continues after the shift

For most small businesses, location at punch is enough. It answers the question you care about, "were they there?", without collecting a record of where an employee goes all day. For state-by-state rules on GPS tracking, see GPS tracking laws by state.

Is a Geofencing Time Clock Legal?

In general, yes. No federal law prohibits employers from using location to verify where employees clock in during work time. But several kinds of laws can apply.

State Electronic Monitoring Notice Laws

A few states require employers to give notice before they electronically monitor employees:

Connecticut: A new law that took effect October 1, 2026, Public Act 26-73, requires prior written notice of the types of electronic monitoring and the specific premises locations where it may occur, a posted notice and, for employees hired on or after October 1, 2026, a plain-language written statement before employment begins. It covers collecting information on an employer's premises about employees' activities by means other than direct observation. Penalties run up to $500, $1,000 and $3,000 for first, second and later offenses.
New York: Employers that monitor employees' phone, email or internet use must give written notice at hire, get an acknowledgment and post the notice. The law focuses on communications and internet use rather than location, but many employers include location data in the same notice.
Delaware: Employers must give notice, either daily or a one-time acknowledged notice, before monitoring employees' phone, email or internet use.

Even where a law doesn't mention location specifically, giving written notice is the simplest way to stay on the right side of these rules and avoid surprises.

Privacy Laws That Cover Employee Data

California's Consumer Privacy Act (CCPA) applies to employees and job applicants of covered businesses, after an exemption for employment data expired at the end of 2022. The state privacy agency lists precise geolocation as sensitive personal information. A for-profit business is covered if it meets a threshold such as $26.625 million or more in annual gross revenue, so many small businesses aren't covered, but those that are need to give notice of what they collect and why.

Biometric Laws, if You Use Face or Fingerprint Verification

Geofencing itself uses location, not biometrics. But many time clocks pair it with face recognition or fingerprint scans to prevent buddy punching. In Illinois, the Biometric Information Privacy Act requires a written, public retention policy and a written release from each employee before collecting biometric identifiers, and it allows lawsuits with liquidated damages of $1,000 per negligent violation or $5,000 per intentional or reckless one. A 2024 amendment treats repeated collection of the same data from the same person by the same method as a single violation. Other states have their own biometric rules, so check before turning on biometric features. A photo taken at clock-in for a manager to review is different from a biometric scan, but confirm how your system works.

Geofencing and Wage-and-Hour Law

The biggest legal risk with geofencing isn't privacy. It's pay. A geofence controls when the time clock lets someone punch in. It doesn't change what counts as hours worked. Under federal law, work the employer knows about or allows must be paid, even if it wasn't requested.

Situation	Is the time paid?
Employee arrives at the site, can't clock in because the geofence is drawn too small, and starts working	Yes; the time worked must be paid, so fix the punch
Employee picks up supplies at the shop, then drives to the first job site	Generally yes; travel between work locations during the workday counts
Employee clocks in from home before driving to the regular workplace	Ordinary commuting generally isn't hours worked, which is why many employers use a geofence
App auto clocks out when the employee leaves the geofence, but they're still working, such as at a supply store	Yes; the time worked must be paid
Employee answers work texts after clocking out	Yes, if the employer knows or should know about the work

If your geofence blocks punches, you need an easy way for employees to request a correction when it gets it wrong, and managers need to approve those corrections promptly. For more, see how to track employee hours and travel time pay for hourly employees.

How to Set Up a Geofencing Time Clock

Decide who needs it. Geofencing makes the most sense for employees who start at a specific site. Office and remote employees usually don't need it.
Draw realistic boundaries. Phone location can be off by dozens or even hundreds of feet indoors or in dense areas. A radius of a few hundred feet around a site usually works better than a tight boundary around the building.
Choose block or flag. Flagging out-of-area punches for review is more forgiving than blocking them, and less likely to cause unpaid work.
Collect location only when needed. Capture location at clock-in and clock-out, not continuously, unless you have a clear business reason.
Write a short policy and get employees' acknowledgment.
Set up a correction process for missed or blocked punches.
Review flagged punches before payroll, every pay period.

Sample Geofencing and Location Policy

Time Clock Location Verification

Employees who work at [job sites / our locations] clock in and out using the [Updoot] mobile app. When you clock in or out, the app records your device's location to confirm you're at the assigned work site. [Punches outside the site boundary are flagged for manager review / The app allows punches only within the site boundary.]

Location is collected only at the time of each punch [and during scheduled work time]. It is not collected when you are clocked out. Location data is used only to verify time records and is kept for [period] with your time records.

If the app won't let you clock in when you're at the site, or records the wrong time, tell your manager the same day so it can be corrected. All time worked will be paid.

Employee acknowledgment: ________ Date: ________

Adjust it for the states where your employees work. In Connecticut, for example, the notice must describe the types of monitoring and where it may occur, and be posted.

Personal Phones vs. Company Phones

Many small businesses ask employees to use the time clock app on their personal phones. That's common, but it raises a few practical questions:

Location only during work: Configure the app so location isn't collected when the employee is off the clock.
Data use: Make sure employees know the app only uses location for punches, not to see their personal activity.
Costs: Some states require employers to reimburse necessary business expenses, which can include part of a personal phone bill when its use is required for work. Check your state's rules.
Alternatives: Offer a kiosk or a supervisor-entered punch for employees who don't have a smartphone or don't want to use their own.

Benefits of Geofencing

Stops clock-ins from home, the car or the coffee shop before arriving.
Reduces buddy punching, especially when paired with photo verification. See what is buddy punching.
Creates stronger time records if hours are ever disputed.
Reminds employees to clock in and out, which cuts missed punches.
Shows managers who is on site across multiple locations at once.

Common Geofencing Mistakes

Mistake	Why it's a problem	Fix
Boundary drawn too tight	Employees on site can't clock in and start working unpaid	Use a realistic radius and flag instead of block
Tracking after clock-out	Off-duty location tracking raises privacy concerns	Collect location only at punches or during work hours
No written notice	Can violate state monitoring laws and erodes trust	Give a written policy and get acknowledgment
Auto clock-out with no review	Employees still working may lose paid time	Review auto clock-outs before payroll
Using location data for unrelated purposes	Goes beyond what employees were told	Use it only for time verification

How Employees Feel About Geofencing

Most employees accept location at clock-in when it's explained clearly. The objections usually come from surprise, not from the feature itself. Tell employees before you turn it on, explain that it only checks location when they punch, show them what managers can see, and give them a way to fix mistakes. Framing it as protection helps too: accurate records protect employees from being shorted just as much as they protect the business.

Is Geofencing Right for Your Business?

Business type	Geofencing fit
Construction and trades	Strong fit; crews start at changing job sites
Cleaning and home care	Strong fit; work happens at client locations
Retail and restaurants with several locations	Good fit; confirms the right store
Single office	Usually unnecessary; a kiosk or web clock works
Fully remote teams	Not useful; use a web punch clock

Questions to Ask Before You Choose a Location-Based Time Clock

Does it collect location only at clock-in and clock-out, or continuously?
Can location collection be turned off when employees are clocked out?
Who on your team can see location data, and can you limit access?
How long is location data stored, and can you delete it?
Does it use biometrics, such as face or fingerprint matching, or just a photo?
Can employees see their own punch locations?
Can managers fix a punch that was blocked or recorded incorrectly, with an edit history?

How Long to Keep Location Data

Location data attached to a punch is part of your time records, and federal law requires keeping time cards for at least 2 years. Beyond that, keep location data only as long as you need it. Holding years of detailed location history increases your risk if there's ever a data breach, and some privacy laws require you to tell employees how long you keep their data. A simple rule many employers use is to keep punch locations with time records for the required period, then delete them.

Location-Verified Punches in Updoot

With GPS turned on, Updoot's mobile time clock captures the location of each clock-in and clock-out, and the team location map shows where punches happened, so managers can confirm job site coverage without tracking employees all day. Pair it with a kiosk for your main location, check punch locations before payroll, and keep every edit in one record. Compare options in how to choose a time clock with GPS tracking.

Sources

Frequently Asked Questions

Is it legal for employers to use geofencing? ▶

Generally yes, for work time. Some states, including Connecticut, New York and Delaware, require notice of electronic monitoring, and California's privacy law treats precise location as sensitive information for covered businesses.

Does a geofencing time clock track employees all day? ▶

Not necessarily. Many geofencing clocks check location only at clock-in and clock-out. Continuous tracking is a separate feature that collects much more data.

Can my employer track my location after I clock out? ▶

It's a bad practice and can raise privacy and legal issues. Most employers configure time clock apps to collect location only during work time or at punches.

What happens if the geofence won't let me clock in? ▶

Tell your manager right away. If you worked, that time must be paid, and your employer should correct the punch.

How big should a geofence be? ▶

Large enough to account for phone location errors, often a few hundred feet around the site. Too tight a boundary blocks employees who are actually there.

Do employees have to use their personal phones? ▶

Employers often ask, but it's good practice to offer an alternative, like a kiosk. Some states require reimbursement of necessary work expenses.

Is geofencing the same as GPS tracking? ▶

No. Geofencing checks whether a phone is inside a boundary, usually at a punch. GPS tracking records location over time.