Privacy guide · Free Word file

PDPL guide for GPS trackers and vehicle cameras (Saudi Arabia and UAE)

An orientation checklist for fleets that fit GPS trackers, MDVR cameras or driver-monitoring cameras. Twelve short chapters, a go-live checklist and pointers to the official texts. Not legal advice.

Free: enter your name and e-mail and we send you the file. Optional: your sector and fleet size help us send the right follow-up.
  • 12 short chapters
  • 15-line go-live checklist
  • Points to the official texts
What's inside

Twelve chapters, one picture of the data path

Every chapter ends with where to look in the official text.

Vehicledevice, cameraNotice and stickerNetworkmobile dataPlatformhostingCountry and contractPeopleroles with accessAccess log
Fig. 1 Where personal data travels, and where a fleet must decide something.
  1. 01

    Why this matters

    Tracking describes a person, and two laws now apply.

  2. 02

    What is collected

    Position, behavior, video and DSM data, in a table.

  3. 03

    The legal basis

    Why employee consent is a weak base.

  4. 04

    Notice

    What drivers must be told, and when.

  5. 05

    Retention

    One period per purpose. Test the deletion.

  6. 06

    Access

    Named roles and an access log.

  7. 07

    Hosting

    Five questions for your platform provider.

  8. 08

    Driver rights

    A route for requests.

  9. 09

    Cameras

    Road, cab and face analytics are separate decisions.

  10. 10

    Common mistakes

    Nine mistakes and the fix for each.

  11. 11

    Go-live checklist

    Fifteen lines with dates.

  12. 12

    Templates

    Which Tracom template serves which step.

Why a fleet is in scope

A tracker records where a vehicle is and how it is driven. A camera records the driver. When the driver is an employee or a contractor, that is data about a person, so the fleet carries duties about how it collects, uses and keeps it. The guide lists the data in a table so you can see it the way a regulator would.

What may have changed

Rules move. In October 2026 the Saudi authority put changes to the Implementing Regulations out for consultation. The UAE regulations were still awaited when we last checked. Read the current text before you rely on any article number in the guide.

The employee consent problem

A form that says "I consent" may not be valid if the driver cannot refuse without risk. Chapter 3 explains why many fleets lead with a clear notice and an acknowledgement, and keep consent for optional items. Your legal adviser confirms what works in your country.

The hosting question

Where the server is, and who can open it from where, matters in both countries. Chapter 7 gives five questions to put to your platform provider and to write into the contract. Tracom does not publish a hosting statement in this file: ask your platform provider for theirs.

Limits of this guide

It helps you ask the right questions. It does not tell you that your fleet complies, it does not replace a lawyer, and it does not cover every country or free zone.

Related Tracom solution

Devices that record what you decide to record

Tracom ST100 is an IVMS GPS tracker. Tracom M1N is a mobile DVR (MDVR) that works with cameras. Decide your data list first. Then we can talk about how the devices are set up for your fleet.

  • ST100. An IVMS GPS tracker.
  • M1N. A mobile DVR (MDVR) that works with cameras.
  • SCMS portal. Manage devices in one place.
  • Over-the-air update. Update device settings and firmware remotely.
Questions

Guide questions, answered

Want to talk about devices and data settings? Talk to Tracom.

Is this legal advice?

No. It is an orientation guide. Your legal adviser decides what applies to your fleet. Saudi article numbers were checked on 3 Nov 2026; UAE and Oman points marked "our reading" still need checking.

Do Tracom devices make my fleet PDPL-compliant?

No. A device cannot make a fleet compliant. What matters is how you use the data: notice, basis, retention and access. Tracom does not claim that any product meets a law.

Does it cover free zones such as DIFC and ADGM?

It only notes that they have separate regimes. Ask legal if your fleet is based there.

Which articles does it cite?

A handful of Saudi and UAE articles. The Saudi ones were checked in the official text on 3 Nov 2026; the UAE and Oman points stay marked "our reading". The Saudi Regulations were out for amendment consultation in October 2026, so numbers can change.

Does it cover Oman or other countries?

Oman has one note for tracking services. Other countries are not covered. See the tracking requirements by country on this site for tracking mandates.

What is Tracom's role?

Tracom makes tracking devices and video recorders. It does not decide your basis, notice or retention, and it gives no legal advice.

Next step

Turn the checklist into a plan

Start with the notice and the DPIA worksheet. Bring your data list when you talk to us.

Related tools and templates

The privacy pack, step by step

Get the report

Enter your details and we will email you the file.

Use your real name so the file arrives addressed to you. Don't worry, we won't flood you with emails or calls.

Scroll to Top