It is legal for a finance company to put a GPS tracker on your car, but only when the loan agreement clearly discloses the device and you consent to it by signing. That consent is the line between lawful tracking and a violation of your rights. State law adds requirements on top of the contract, and federal regulators have punished lenders who misuse the technology or the data it produces.
Consent in the Loan Agreement Is the Legal Test
The legality of a tracker starts and ends with your paperwork. The contract needs a clause that tells you a GPS device will be installed, what it does, and why the lender is using it. A vague reference buried in boilerplate is not enough. The disclosure should be conspicuous and written plainly so you know what you are agreeing to before you sign.
When you sign a loan agreement containing that disclosure, you are giving the lender explicit permission to install and use the device. The paperwork should spell out that the tracker is a condition of the financing and that it exists to protect the lender’s interest in the vehicle. Most lenders treat it the way they treat insurance requirements: it is baked into the deal, and refusing means you do not get the loan.
Trackers show up most often in subprime auto lending. If you are financing through a buy-here-pay-here dealership or a lender that specializes in borrowers with lower credit scores, a tracker is probably part of the package. Traditional banks and credit unions lending to well-qualified borrowers rarely use them.
State Laws Add a Second Layer of Rules
Your state may impose its own rules about GPS tracking that go beyond what the contract covers. Common state-level requirements include a separate signed disclosure form on top of the clause in the main contract, minimum notice periods before a lender can remotely disable a vehicle, and restrictions on what functions the device is allowed to perform. Several states, for example, require lenders to warn borrowers days before using a starter interrupt feature.
The specifics differ enough that you need to check your own state’s consumer protection statutes to know what applies to you. If your lender did not follow the state’s disclosure rules, the installation could be unlawful regardless of what the loan agreement says. A finance company has to satisfy both its contract and the state’s requirements.
What Lenders May Do With GPS Data
When a tracker is lawfully installed, the lender can use the location data for purposes tied directly to managing the loan. The most obvious is locating the vehicle for repossession after default. Rather than sending a recovery agent to search for a car that may have moved, the lender pulls up its current location.
Lenders also use the devices for less dramatic functions. Some send automated payment reminders as your due date approaches. Others monitor whether the vehicle stays within a geographic boundary set in the loan terms. If the car is reported stolen, the GPS data helps both you and the lender recover it.
Starter Interrupt Devices Draw the Hardest Scrutiny
Many trackers installed by lenders come paired with a starter interrupt device, sometimes called a kill switch, that lets the lender remotely prevent your car from starting. It is the piece of this technology that draws the most regulatory attention. The basic idea is that after you miss payments and the lender has given proper notice, the starter interrupt keeps the car from starting so a repossession agent can recover it. Some states require the lender to warn you days before activating the device, with a final warning at least 48 hours before the car is actually disabled.
The CFPB has sued lenders who misuse this feature. In one action against USASF Servicing, the agency alleged the company incorrectly disabled vehicles at least 7,500 times and triggered warning tones in cars more than 71,000 times during periods when borrowers were not in default or were actively communicating with the servicer about upcoming payments. The CFPB further alleged USASF disabled vehicles at least 1,500 times after explicitly promising borrowers it would not do so.1Consumer Financial Protection Bureau. CFPB Sues USASF Servicing for Illegally Disabling Vehicles and for Improper Double Billing Practices Disabling a vehicle in a way that creates a safety hazard, such as when a driver is on the road or in an unsafe area, is the kind of conduct regulators consider unfair under federal consumer financial protection law.
What Lenders May Not Do With Your Data
Having a lawful tracker on your car does not give the lender a blank check with your location information. Selling that data to third parties without your informed consent is a clear violation. The FTC finalized a settlement with General Motors and OnStar in January 2026 after alleging the companies collected precise geolocation and driving behavior data from millions of vehicles through the OnStar Smart Driver feature and sold it to consumer reporting agencies without adequate notice or consent.2Federal Trade Commission. FTC Finalizes Order Settling Allegations that GM and OnStar Collected and Sold Geolocation Data Without Consumers Informed Consent
The FTC has also made clear that geolocation data is sensitive information subject to heightened protections. Collecting, using, or disclosing precise location data can be an unfair practice when it reveals visits to places like medical clinics, places of worship, or domestic abuse shelters.3Federal Trade Commission. Cars and Consumer Data – On Unlawful Collection and Use Using GPS data to continuously monitor your daily movements for harassment or intimidation is illegal. So is sharing that data with marketers or anyone without a legitimate interest tied to the loan.
Data Security Obligations
Finance companies that collect your GPS data also have a legal obligation to protect it. Under the Gramm-Leach-Bliley Act, financial institutions must safeguard sensitive customer information. The FTC’s Safeguards Rule specifically requires automobile dealers who extend credit or arrange financing to develop and maintain a written information security program with administrative, technical, and physical safeguards designed to protect customer data.4Federal Trade Commission. Gramm-Leach-Bliley Act That includes the location data streaming from the device on your car. A lender that stores months of your travel history on an unsecured server is violating federal law.
How GPS Tracking Interacts With Repossession
Tracking makes repossession faster and cheaper for lenders, but it does not override the legal limits on how repossession works. Even when a lender knows exactly where your car is parked, the repossession agent still has to follow the rules.
The Breach-of-Peace Limit
Under Article 9 of the Uniform Commercial Code, which every state has adopted in some form, a secured creditor can repossess collateral without going to court, but only if the repossession happens without a breach of the peace.5Legal Information Institute. UCC 9-609 – Secured Partys Right to Take Possession After Default A repo agent who locates your car via GPS inside a locked garage or behind a closed gate cannot break in to take it. The tracker tells the lender where the car is; the law still prevents forceful entry, confrontation, or any recovery method that would disturb the peace. If a repo agent crosses that line, you may have a legal claim for damages even if you were behind on payments.
Active-Duty Military Protection
Active-duty servicemembers get extra protection under the Servicemembers Civil Relief Act. If you signed the auto loan and made at least a deposit or first installment before entering military service, the lender cannot repossess your vehicle without a court order, regardless of what GPS data shows.6Office of the Law Revision Counsel. 50 USC 3952 – Protection Under Installment Contracts for Purchase or Lease A servicemember can waive this right, but the waiver has to be in writing, conspicuous, on a separate document from the loan agreement, and signed during or after the period of military service. A waiver signed before entering service becomes invalid once the servicemember reports for duty.
Do Not Remove the Tracker Yourself
Removing a GPS device from a financed car when the loan agreement requires it is a breach of contract. Most agreements treat tampering with or removing the tracker as a default event, which lets the lender accelerate the entire loan balance and demand full payment immediately. If you cannot pay, that opens the door to repossession.
Some borrowers disconnect the device thinking it is an invasion of privacy, not understanding they agreed to it as part of the financing. If you have a genuine concern that the tracker is being misused, document the problem and raise it with the lender or a consumer protection attorney instead of pulling the device out.
What to Do If You Suspect Illegal Tracking
Start by pulling out every document you signed when you financed the vehicle. Read the loan agreement, any addendums, and any separate disclosure forms. You are looking for language that authorizes the installation and use of a GPS device and spells out what the lender can do with the data.
If there is no mention of a tracker anywhere in your paperwork, the device may not have been lawfully installed. If you do find the disclosure but believe the lender is using the data for purposes beyond what the agreement or the law allows, such as selling your location information or disabling your car when you are current on payments, put your complaint in writing to the lender first and keep a copy.
When the lender’s response does not resolve the issue, file a complaint with the CFPB and consult a consumer protection attorney. An attorney can evaluate whether the lender violated your state’s disclosure requirements, breached the contract, or engaged in unfair practices under federal law. Borrowers who are being tracked or disabled illegally have real legal options.