GPS Tracking Laws by Province in Canada [2026]

GPS tracking legality in Canada sits at the intersection of three legal layers. Criminal Code, RSC 1985, c C-46, s 492.1 is the only statutory warrant for tracking devices, and it is available to law enforcement only. Criminal Code s. 430 makes unauthorized tracker installation criminal mischief. The third layer is provincial privacy law. The criminal floor is consistent across Canada, but employer obligations and consent requirements diverge significantly by province.

What counts as GPS or location tracking under Canadian law

Under Criminal Code, RSC 1985, c C-46, s 492.1, a “tracking device” is any device (including a computer program) that may be used to obtain, record, or transmit tracking data by any means of telecommunication. “Tracking data” means data that relates to the location of a transaction, individual, or thing. This definition is deliberately broad: it captures hardwired GPS units, OBD2 port devices, magnetic exterior trackers, and mobile apps that transmit location.

The provision was enacted March 9, 2015 by the Protecting Canadians from Online Crime Act (SC 2014, c 13), replacing earlier patchwork warrant provisions. Its scope extends to GPS coordinates, cell-tower triangulation data, and any transmitted location signal linked to an identifiable person or object.

In PIPEDA Case Summary #2022-001 (the Tim Hortons App investigation), the OPC confirmed that granular GPS location data is sensitive personal information under PIPEDA. Continuous location tracking requires express consent because the data can reveal medical appointments, religious practices, and home or workplace locations. That classification applies equally to vehicle-mounted GPS trackers generating continuous location records tied to an identifiable individual.

Devices in scope under s. 492.1’s definition include:

• Hardwired GPS tracking units installed in a vehicle’s chassis or OBD2 port
• Magnetic exterior trackers placed on a vehicle’s undercarriage or wheel well
• Mobile apps that share location data via any telecommunications link
• Fleet telematics and automatic vehicle location (AVL) systems
• Bluetooth beacons or cellular-network location loggers

Criminal Code s. 492.1: the tracking-device warrant framework

The s. 492.1 framework operates on a two-tier standard. Under s. 492.1(1), a justice or judge may issue a tracking warrant on “reasonable grounds to suspect” an offence. That lower tier covers tracking a transaction, thing, or vehicle only. The threshold rises to “reasonable grounds to believe” under s. 492.1(2) when the warrant seeks to track an individual through an item typically carried or worn by that person. Parliament drew a meaningful privacy line between tracking a vehicle and tracking a human being.

Duration limits follow the same graduated logic. A standard tracking warrant is valid for up to 60 days after issue. An extended warrant of up to one year is available when the investigation relates to criminal organization offences under ss. 467.11–467.13 or terrorism offences. Both tiers are available only to peace officers and public officers — the statute does not authorize private investigators, legal counsel, or civil litigants to obtain tracking warrants.

The Supreme Court’s 1992 decision in R. v. Wise, 1992 CanLII 125 (SCC), [1992] 1 SCR 527 was the direct catalyst for these provisions. The Court held that police installation of an electronic beeper in Wise’s vehicle without prior judicial authorization violated s. 8 of the Canadian Charter of Rights and Freedoms. Electronic surveillance of vehicle movements, the Court reasoned, is qualitatively different from observation on a public road: it would be “akin to having an agent of the state in the car constantly reporting one’s location.” Parliament responded with s. 492.1 to create judicial oversight for law-enforcement tracking.

In R. v. Jarvis, 2019 SCC 10, the Supreme Court established a broader contextual privacy analysis: being in a public or semi-public space does not automatically negate a reasonable expectation of privacy. Privacy is not an all-or-nothing concept. Courts assess the nature of the observation (one-time versus continuous), the manner of recording, consent, and existing regulations. While Jarvis arose from a voyeurism case, its framework applies to continuous GPS tracking of a person. The accumulation of location data over days or weeks can engage Charter s. 8 scrutiny even when individual movements occur in public spaces.

For the broader context of how Canadian surveillance law applies across observation types, see the surveillance laws by province analysis.

Bill C-22 (45th Parliament, 1st Session), the proposed Lawful Access Act, 2026, passed the House of Commons on June 18, 2026. It received Senate first reading that same day (LEGISinfo 2026). As of June 30, 2026, it has not received royal assent and is not law. Criminal Code s. 492.1, as enacted by SC 2014, c 13, remains the operative tracking-warrant provision.

The vehicle-ownership threshold: sole owner, co-owner, not owner

Vehicle ownership is the decisive threshold for lawful GPS tracker use by a private individual or licensed PI. The table below maps each scenario to its legal consequence under Criminal Code s. 430.

Where a person is the sole registered owner, their consent is the legal foundation. The investigator must retain the current vehicle registration and the client’s written consent before the device goes on the vehicle. Section 430’s mischief offence is the negative space: it captures wilful interference with another’s property, and the absence of owner consent is what activates it.

The co-ownership scenario — most common in matrimonial investigations involving jointly titled vehicles — has not been resolved by any published GPS-specific Canadian decision. Some practitioners argue that a property co-owner can grant access to the shared property. That argument has not been tested in court in the GPS tracker context, leaving co-ownership as a genuine legal grey zone. Licensed PIs should treat it as a no-go without all-owner consent.

Installing a tracker on a vehicle you do not own and without any owner’s consent is criminal mischief. Property valued over $5,000 attracts a maximum of 10 years on indictment; property under $5,000, up to 2 years under s. 430. A mischief conviction can also trigger PI licence suspension or revocation under provincial licensing statutes such as Ontario’s PSISA, SO 2005, c 34. The dual exposure — criminal record and loss of livelihood — is the reason the ownership threshold is non-negotiable in professional PI practice.

Consent and location data under PIPEDA vs provincial equivalents

PIPEDA (SC 2000, c 5) governs private-sector organizations collecting, using, or disclosing personal information in commercial activities. It applies directly in seven provinces: Ontario, Nova Scotia, New Brunswick, PEI, Manitoba, Saskatchewan, and Newfoundland and Labrador. Alberta, BC, and Quebec each have substantially similar legislation (exemption orders SOR/2004-219, SOR/2004-220, and SOR/2003-374 respectively) that displaces PIPEDA for provincially regulated employers. PIPEDA still applies in all ten provinces to federally regulated employers (banks, telecoms, and airlines), regardless of where their vehicles operate.

Under PIPEDA s. 5 and Schedule 1, Principle 4.3, consent is required before collecting personal information. The OPC’s December 2015 Interpretation Bulletin on consent confirms that express consent is the most appropriate form for sensitive personal information. Granular GPS location data falls in that category: it can reveal patterns of movement, personal associations, medical visits, and religious practices.

Alberta PIPA (SA 2003, c P-6.5, in force January 1, 2004) governs provincially regulated private-sector organizations in Alberta. Under its reasonable-person purpose standard, GPS location data requires clear notice and express consent. That standard applies before a tracker goes on an employee’s vehicle for any purpose beyond routine dispatch or safety management. The OPC’s Q&A on AB/BC PIPA application confirms these principles parallel the PIPEDA standard.

BC PIPA (SBC 2003, c 63, in force January 1, 2004) imposes the same reasonable-person standard at both the collection stage (s. 11) and the use stage (s. 14). Because GPS location data is sensitive, BC organizations must disclose the fact of GPS tracking and obtain consent before collection. Implied consent is insufficient for continuous location monitoring.

Quebec’s Law 25 added s. 8.1 to CQLR c P-39.1, with effect from September 22, 2023. Any enterprise using location-identification technology must first inform the person of its use and how to activate location functions. Those functions must be deactivated by default. A Quebec employer or PI firm cannot activate GPS tracking by default; the individual must voluntarily and knowingly turn the function on.

For a full comparison of how PIPEDA and provincial equivalents divide jurisdictional responsibility, the recording laws by province post covers parallel consent structures for audio and video surveillance.

Employer and fleet GPS tracking: consent and notice obligations by province

Employer GPS tracking of company vehicles is generally permissible across Canada — but the legal conditions vary by province and purpose.

Ontario is the only province with a statute-specific electronic monitoring obligation. Under Employment Standards Act, 2000, SO 2000, c 41, s 41.1, any employer with 25 or more employees as of January 1 must have a written electronic monitoring policy. That policy must be in place before March 1 of that year. It must state whether the employer monitors employees electronically. If it does, the policy must describe how monitoring occurs and the purposes for which collected information may be used. This is a transparency obligation — it does not prohibit GPS fleet tracking.

Seven provinces fall under PIPEDA for private-sector GPS tracking: Ontario, Nova Scotia, New Brunswick, PEI, Manitoba, Saskatchewan, and Newfoundland and Labrador. The OPC’s workplace privacy guidance (updated May 29, 2025) requires employers in these provinces to identify the purpose before collection and provide advance notice to employees. Collection must be limited to that stated purpose, and privacy loss must be proportional to the benefit. The OPC confirmed in PIPEDA Case Summary #2006-351 that GPS tracking of company vehicles is permissible for dispatch, safety, and asset-management under implied consent. Using GPS data to evaluate individual employee performance requires express consent instead.

Alberta and BC parallel the PIPEDA standard under their respective PIPA statutes. Collection of employee location data must serve a purpose a reasonable person considers appropriate, and employees must receive advance notice before monitoring begins. Implied consent covers routine dispatch and safety use; express consent is required when GPS data feeds personnel decisions.

Quebec has the strictest employer GPS rules in Canada. Law 25 s. 8.1 requires disclosure and deactivation by default for any location-identification technology. Employers must also have designated a privacy officer and completed a privacy impact assessment before deploying new tracking systems — requirements in force since September 22, 2023.

GPS tracking by province: consent, privacy statute, employer obligation

The seven PIPEDA provinces have no substantially similar private-sector statute. The three exceptions are Quebec, British Columbia, and Alberta. Each operates under its own regime, with stricter or more specific GPS tracking rules than the PIPEDA baseline (OPC provincial laws guidance 2024).

The one-party consent recording laws in Canada post covers related consent structures for audio interception, where provincial variation also affects PI practice.

What a licensed PI can and cannot do with GPS tracking

A licensed PI in Canada CAN lawfully:

• Install a GPS tracker on a vehicle with written consent from the sole registered owner, retaining a copy of the current vehicle registration confirming sole ownership
• Document a vehicle’s movements in publicly accessible locations during a lawful investigation
• Use GPS tracking in support of a civil mandate — insurance fraud investigation, custody-schedule verification — where the client is the sole registered owner
• Retain GPS data as evidence where collection complied with applicable privacy law and the stated investigative purpose

A licensed PI in Canada CANNOT lawfully:

• Install a GPS tracker on a vehicle they do not own and have no owner’s consent to access — doing so creates criminal mischief liability under Criminal Code s. 430
• Install on a co-owned vehicle without documented consent from all registered owners
• Obtain or execute a Criminal Code s. 492.1 tracking warrant — that authority belongs only to peace officers and public officers
• Track the movements of an individual through a device on their person without that person’s knowledge and consent under PIPEDA or the applicable provincial PIPA
• Use GPS tracking data for purposes beyond what the client consented to, in contravention of PIPEDA’s purpose-limitation principle

Ontario’s Private Security and Investigative Services Act, 2005 requires every licensed PI to comply with all federal, provincial, and municipal laws (PSISA, SO 2005, c 34). A mischief conviction under Criminal Code s. 430 arising from an unauthorized GPS tracker would be grounds for licence suspension or revocation. The spousal surveillance laws in Canada post covers the specific consent and Charter constraints when GPS tracking arises in a domestic or marital context.

Surveillance services covering GPS field deployment and vehicle documentation are available from licensed investigators — the work starts with ownership verification, not with the device.

What this means for GPS tracking in Canada

The legal framework is unusually clear on one point: the criminal floor is consistent across all ten provinces. Installing a GPS tracker on a vehicle you do not own, without owner consent, is criminal mischief under s. 430 everywhere in Canada. No province has created an exemption, and no civil private-interest justification overrides criminal liability.

Where the law diverges is in the privacy layer above that floor. Quebec’s deactivate-by-default rule for location technology is the strictest standard in Canada, and it applies to any enterprise — employer or PI firm — operating in the province. Ontario’s written-policy obligation is procedural rather than prohibitive, but a failure to comply creates employer liability under the ESA.

As licensed PIs operating across Canada, we apply a three-question test before any GPS tracker deployment. First: is the client the sole registered owner of the vehicle? If not, the device does not go on. Second: does the tracking purpose comply with PIPEDA or the applicable provincial privacy statute, and is the personal information collected proportionate to the investigative need? Third: is the deployment documented — client consent in writing, vehicle registration on file, and purpose stated? Only when all three answers are yes does GPS tracking form part of an engagement. Canadian law gives licensed PIs no equivalent of the s. 492.1 warrant authority available to police. Legitimacy rests on ownership consent and privacy-law compliance, nothing else.

For the full picture of how surveillance law applies beyond GPS tracking, the surveillance laws by province post covers the broader federal and provincial framework. The surveillance pillar indexes the complete series.

This article provides general legal information, not legal advice. Canadian law varies by jurisdiction and changes over time. For advice specific to your situation, consult a lawyer licensed to practise in your province.