GPS Attendance in Singapore: Geofence Clock-In and the PDPA
How GPS geofenced clock-in works for field and multi-site staff in Singapore, where it fails, the alternatives, and what the PDPA and MOM expect of employers.
Frequently asked questions
Do I need employee consent to use GPS clock-in in Singapore?
Under the PDPA, collecting employee personal data that is reasonable for managing the employment relationship does not require consent, and PDPC lists managing work schedules and deployment as examples. But you must still notify employees of the purpose, for example in the employment contract, handbook or an HR notice. Collecting location for purposes unrelated to managing employment would generally need consent unless another exception applies.
Is it legal to track employees' location continuously in Singapore?
The PDPA does not ban location tracking, but PDPC says employers should act based on what a reasonable person would consider appropriate in the circumstances. Recording a location at the moment of check-in is much easier to justify than tracking someone all day, and tracking outside working hours is very hard to justify. Collect only what your stated purpose needs.
How accurate is GPS clock-in for staff working in HDB estates or indoors?
Phone location is usually reliable in the open but drifts indoors, in void decks, basements, underground car parks and between tall blocks. That drift can put a genuine worker outside the geofence. Most employers handle this with a sensible radius, a grace buffer and a manager-approved exception flow rather than a hard block.
What attendance records does MOM require employers to keep?
For employees covered by the Employment Act, MOM requires records including working hours with the duration of meal and tea breaks, and details of public holidays and leave taken. Records must be kept for the latest two years for current employees and for one year after an employee leaves. Soft or hard copies are both acceptable.
What are the alternatives to GPS geofenced check-in?
The common alternatives are scanning a QR code posted at the site, taking a selfie at clock-in, tapping an NFC tag fixed at the location, or a biometric terminal at a fixed office. Each trades off cost, fraud resistance and how much personal data you collect. Many field teams combine GPS with one light secondary check such as a site QR code.
How long should we keep GPS check-in data?
The PDPA does not set a fixed period, but says you must stop retaining personal data once it no longer serves its purpose and is not needed for legal or business reasons. Since MOM requires working-hour records for two years for current staff and one year after they leave, many employers keep the attendance record for that period and hold raw location points for a shorter, defined window.
An insight from Rampage Connect — a Singapore digital marketing and web studio. Contact: hello@rampageconnect.com