Field staff, technicians, sales reps, construction crews — when the work doesn't happen in an office, clocking in from a phone with location verification is the obvious answer. And the question comes up right away: is it even legal? The short answer: yes, when it's done right — and the difference between "right" and "wrong" is mostly the difference between point-in-time verification and continuous tracking.

The legal framework in brief

There is no Israeli law that specifically regulates GPS attendance clocks. The rules come from several sources:

• The Protection of Privacy Law — a person's location is personal information, and collecting and storing it is subject to the law, including data security and registration duties.
• Guidance from the Privacy Protection Authority — the Authority has published positions on employee monitoring, including requirements of a legitimate purpose, proportionality, transparency and informed consent.
• Labor court rulings — which set core principles for privacy in the workplace: legitimacy, proportionality, transparency and consent. The principles were set in the context of email monitoring, and are applied by analogy to other tracking technologies.

The four principles that decide whether it's legal

• Legitimate purpose. Reliable attendance records are a clearly legitimate interest — the employer is in fact required by law to record hours. "Knowing where the employee is at every moment" is not a legitimate purpose in itself.
• Proportionality. Collect the minimum the purpose needs. For attendance, the location at the moment of clocking in is enough — which is why continuous collection throughout the day almost always fails this test.
• Transparency. Employees know in advance, in writing, what is collected, when, for what purpose, who sees the data and how long it is kept. Covert tracking is prohibited.
• Informed consent. Consent is given after employees are informed, not as a blanket condition signed without understanding. Keep in mind that because of the power imbalance in employment, the courts treat employee consent with suspicion — so proportionality and transparency are the real protection.

What a sound setup looks like in practice

• Collection at the moment of clocking only — the app checks location when the employee taps "Clock in" or "Clock out", not in the background.
• Defined work sites (geofencing) — the system verifies that the clock-in happened within a set radius of the work site, instead of storing a movement trail.
• A written policy and notice — a short procedure explained to employees at onboarding and signed, as part of the employment documents.
• Access permissions — location data is visible only to those who need it (direct manager, payroll), not to every manager in the system.
• An alternative for anyone without a suitable phone — a physical NFC clock-in station on site, so no employee is left without a way to clock in.

What about biometric clocks?

While we're on location, it's worth knowing: the "traditional" fingerprint clock is actually the most legally problematic. The National Labor Court ruled that an employer may not require employees to give a fingerprint for an attendance clock without explicit, voluntary consent, and that biometric data is especially sensitive information. Point-in-time location verification or an NFC card are simple alternatives that avoid this problem entirely.

How RayClock handles it

In RayClock, location verification works exactly by these principles: the location is checked only at clock-in, against work sites defined in advance, with no background collection and no movement trails. The clock-in is saved with the verified site, and all data is subject to role-based permissions. Read more about the attendance clock app and the other clock-in methods.

The information in this article is general and is not legal advice. Workplace privacy is evolving through case law and Privacy Protection Authority guidance, and how it applies depends on the specific circumstances of each workplace. Before introducing a tracking or location verification system, we recommend consulting a lawyer who specializes in employment and privacy law.