Privacy Constraints on EU Route Data: DSGVO and Local Rules

Last-mile delivery fleets operating across EU low-emission zones generate a constant stream of location data: GPS pings, timestamps, stop durations, license plate captures at zone cameras, and driver identifiers tied to vehicles. Under the DSGVO (the Dutch/EU implementation of GDPR), this route data is personal data the moment it can be linked to an identifiable driver — which, in practice, is almost always. Fleet operators building LEZ compliance workflows need to treat route logs as regulated data, not just operational telemetry.

What counts as personal data in route logs

Route data becomes personal data under DSGVO when it can reasonably be traced back to an individual, directly or indirectly. GPS coordinates linked to a driver ID, a vehicle assigned to one person, or timestamps that correlate with shift schedules all qualify. Even "anonymized" telematics feeds often fail true anonymization tests because vehicle plates, device IDs, or route patterns can re-identify a driver when cross-referenced with rosters or delivery manifests.

This matters for milieuzone compliance tools that log entries into low-emission zones: a timestamped plate-and-location record used to verify zone access is, by definition, personal data processing, even if the operator's only goal is proving compliance rather than monitoring behavior.

Lawful basis and purpose limitation

DSGVO requires a clear lawful basis before collecting route data at all. For most fleets, this is either "legitimate interest" (proving LEZ compliance, avoiding fines, optimizing routes) or contractual necessity (fulfilling delivery obligations). Consent is rarely the right basis for employee tracking, since the power imbalance between employer and driver makes freely-given consent legally shaky.

Purpose limitation is where many operators slip up. Data collected to confirm a vehicle avoided a restricted zone cannot automatically be repurposed for performance reviews, disciplinary action, or insurance disputes without a separate legal basis and, often