Clocking In Across Multiple Sites: Mobile Staff, Geofencing and Data Protection

This article reflects Snow Technology’s opinion and experience. It is general information, not legal, tax or HR advice.

Short answer: Staff who work across several sites, or who don’t have a fixed workplace at all, are the hardest to record accurately. In our view, mobile clocking with location checks at the point of clock-in, rather than continuous tracking, gives Irish employers accurate records while keeping data collection proportionate. We’d recommend reading the Data Protection Commission’s workplace guidance before choosing any location-based or biometric method.

Why multi-site staff are different

Multi-site working is common across retail chains, facilities management, security, healthcare, home care and construction. It creates problems that single-site clocking doesn’t:

• No fixed terminal. A wall-mounted clock only works if everyone passes it.
• Travel time between sites. Is it working time? That depends on the circumstances and the contract, and many employers don’t record it at all.
• Cost allocation. If someone splits a day between two sites or clients, both need the right hours charged to them.
• Paper timesheets filled in later. For off-site staff, times are often reconstructed at the end of the week.

Mobile clocking

Mobile apps let staff clock in and out from their phone or a shared tablet on site. In our view, they’re now the most practical option for multi-site teams, but only with sensible controls:

• Location checks at clock-in. Geofencing confirms that the person clocking in is at or near the expected site. It captures location at the moment of clocking only.
• Clocking linked to the roster. The system expects a clock-in at a particular site and time, and flags anything that doesn’t match.
• Offline capability. Clockings made in poor signal areas are stored and uploaded later, with the original time preserved.

Why we’d avoid continuous tracking

There’s a big difference between checking location when someone clocks in and tracking their location all day. Guidance on Irish employee monitoring treats biometric monitoring and continuous location tracking as high-risk monitoring requiring a Data Protection Impact Assessment.

The DPC’s workplace guidance also makes the point that data collected for one purpose can’t simply be reused for another. Its example is an employer that collected car park and building access data for security, which couldn’t later use that data to verify time and attendance.

In our view, the lesson is to decide what you need, collect only that, and tell employees clearly what’s collected and why. Location at clock-in, used only to confirm clock-ins, is much easier to justify than a live map of where your staff are. For help explaining the rollout, see our guide to addressing employee concerns about mobile clocking.

Biometrics across multiple sites

Fingerprint or facial recognition terminals at each site can look like the tidiest solution. We’d urge caution. The DPC lists biometric data among the processing that requires a mandatory Data Protection Impact Assessment. Irish employees also opt out more often than their UK counterparts: one company operating in both countries reported a 15% opt-out rate in Ireland, compared with 1% in the UK. Every opt-out needs an alternative method, which means running two systems across every site.

Travel between sites

We’d recommend recording travel between sites as its own time type. Whether it’s paid or not depends on your contracts and circumstances, and you may want advice on that. Recording it gives you the facts to make the decision, and the evidence if the question ever comes up.

Keeping records in one place

With staff spread across locations, records can easily end up spread across locations too. In our view, all time records should sit in one central system, so you can produce a full picture of any employee’s hours across every site, whether it’s for a WRC inspector, an employee query or your own audit.

What good looks like

• Mobile clocking with location checks at clock-in only, linked to the roster
• A DPIA and clear employee communication before any location-based or biometric method goes live
• Travel between sites recorded as its own time type
• Hours allocated to the correct site or cost centre automatically
• All sites’ records in one central system

Frequently asked questions

How do mobile employees clock in?
Most use a mobile app or a shared tablet on site. Geofencing can confirm that the clock-in happened at or near the expected location.

Is GPS tracking of employees allowed in Ireland?
Continuous location tracking is generally treated as high-risk monitoring and requires careful justification and a Data Protection Impact Assessment. In our view, checking location only at clock-in is a more proportionate approach. We’d recommend reading the DPC’s workplace guidance.

Should travel between sites be recorded?
We’d recommend recording it as a separate time type. Whether it’s paid depends on your contracts and circumstances, but recording it gives you accurate information either way.

Step 1: Audit your records and your baseline

Start with the question a WRC inspector would ask: could you produce three years of working-time records, including breaks, for every employee, today? If the answer is “partly” or “from several spreadsheets”, that’s your first risk

Step 2: Use digital time capture that records breaks

Paper and spreadsheet timesheets are where most errors start, and they’re the hardest records to defend at a WRC hearing.

Digital time capture records start times, finish times and breaks at the point of work, through terminals, mobile apps or web clocking. Make sure breaks are captured automatically. In the WRC’s bookmaker cases, a point-of-sale system recorded start and finishing times but not the time and duration of breaks, so the employer couldn’t rely on the exemption available for electronic record-keeping.

Step 3: Choose a clocking method that complies with GDPR

Fingerprint and facial recognition clocking can stop buddy punching, but in Ireland they carry significant data protection risk.

The Data Protection Commission lists biometric data among the processing activities that require a mandatory Data Protection Impact Assessment. Where an employee has a legitimate privacy concern, they must be able to opt out, and you must offer another way to record their time. Irish employees are also more likely to object: one company operating in both jurisdictions reported a 15% opt-out rate in Ireland, compared with 1% in the UK.

You also can’t repurpose data collected for another reason. The DPC’s workplace guidance says an employer that collected car park and building access data for security couldn’t later use it to verify time and attendance.

In practice: PIN, badge or mobile clocking is the lower-risk option for most Irish employers. If you do use biometrics, complete a DPIA first and offer an alternative method.

Step 4: Build Irish working-time and pay rules into the system

Many timesheet errors are calculation mistakes made when someone applies the rules by hand. Configure the rules once and let the system apply them to every shift:

• Rest breaks. 15 minutes after 4.5 hours of work, and 30 minutes after 6 hours.
• Daily and weekly rest. 11 consecutive hours of daily rest, and 24 hours of weekly rest on top of that.
• The 48-hour average week. Calculated over the correct reference period.
• Sunday work. Ireland is unusual in giving Sunday workers a statutory entitlement to extra compensation where the contract doesn’t already cover it.
• Minimum wage. The rate rose to €14.15 an hour in January 2026, and the Low Pay Commission has recommended €14.94 from 1 January 2027. Rate changes need to take effect in the system on the right date.

According to Nucleus Research, unified rules and integrated data can reduce payroll errors by up to 95% and cut regulatory administration time by 33%.

Step 5: Control overtime and the 48-hour average through scheduling

Scheduling is where overtime costs and 48-hour breaches both start. Nucleus Research found that manual scheduling often increases labour costs by 3–6% through unintentional schedule padding, and that automated scheduling cuts the time managers spend on it by an average of 75%.

Workforce management tools can flag when an employee is close to an overtime threshold or their 48-hour average before the next shift is assigned. That’s cheaper than paying overtime you didn’t plan for, and much cheaper than defending a working-time claim.

Step 6: Approve exceptions before payroll closes

Set a firm deadline for managers to review missed punches, unscheduled overtime and early clock-ins before each pay run. This moves error correction to before payday, when it takes a click, instead of after, when it means back-pay and a frustrated employee.

It also creates a dated audit trail showing who approved what. That’s exactly the evidence you’ll need at a WRC hearing.

Step 7: Integrate time and attendance with payroll

In Ireland, a timesheet error doesn’t stay in the timesheet. Under PAYE Modernisation, each payroll run must be reported to Revenue on or before payday. Payroll data also drives My Future Fund: the system uses Revenue payroll data to identify which employees are eligible, so an error in hours becomes an error in your Revenue submission and in your auto-enrolment contributions.

Integration removes the re-keying step. Approved hours flow straight into payroll with premiums already calculated. Nucleus Research found that modern workforce management deployments deliver a 46% reduction in payroll processing time.

Step 8: Let employees check and correct their own time

Employees are often the first to spot a missing punch, but usually only after they’ve been paid. Mobile self-service lets staff see their recorded hours, flag gaps and request leave against their actual balance before payroll runs. Fewer errors reach the payslip, and payroll receives fewer queries.

Step 9: Keep records ready for a WRC inspection

WRC inspectors can examine records, interview employers and employees, and take copies of documents. They normally give notice before a visit, but don’t usually say what it’s about. Your records need to be available in a form an inspector can read and understand, not scattered across spreadsheets and paper files.

Keep three years of records for every employee, stored centrally and exportable by employee and date range. If an inspector arrives, you should be able to produce what they ask for the same day.

What savings can a 200-person business expect?

Results depend on your workforce and current process, so treat these as illustrations rather than promises:

Cost area	Current annual cost	Benchmark	Illustrative saving
Processing time	€39,239–€58,859	46% reduction (Nucleus)	€18,050–€27,075
Error correction	€15,459	Up to 95% reduction (Nucleus)	Up to €14,686
Overtime and time leakage	€108,876–€217,751	Varies by business	€54,438 for every 0.5% of payroll recovered
WRC exposure	Not modelled	Section 25(4) burden of proof	Records you can defend

WRC-ready timesheet checklist

• Three years of working-time records for every employee, available on request
• Start and finish times, breaks, daily and weekly hours, and annual leave all recorded
• Clocking method reviewed for GDPR, with a DPIA completed if you use biometrics
• Break, rest, 48-hour average, Sunday premium and minimum wage rules configured in the system
• Scheduling alerts set for overtime and the 48-hour average
• Manager approval deadline in place before each pay run, with an audit trail
• Time and attendance integrated with payroll, so Revenue and My Future Fund submissions use approved hours
• Records exportable by employee and date range for a WRC inspector

 

A note on sources

Irish legal and enforcement information comes from the Organisation of Working Time Act 1997, WRC and Labour Court decisions, the WRC Annual Report 2025 and DPC guidance. Cost figures use CSO earnings data for Q2 2026. The international benchmarks from Nucleus Research are based on case studies of workforce management deployments, so treat the “up to” figures as ceilings, not averages.

Frequently asked questions

What working-time records must Irish employers keep?
Under section 25 of the Organisation of Working Time Act 1997, employers must keep records showing compliance with the Act, including start and finish times, rest breaks, daily and weekly hours worked, and annual leave. Records must be kept for at least three years.

What happens if I don’t have timesheet records at a WRC hearing?
Under section 25(4), if you haven’t kept the required records, the burden of proving compliance shifts to you. WRC and Labour Court decisions show that employers without records regularly lose working-time claims.

Is failing to keep working-time records an offence in Ireland?
Yes. An employer who fails to keep the required records without reasonable cause commits an offence under section 25(3) of the Act.

Can Irish employers use fingerprint clocking?
Yes, but biometric data is sensitive under GDPR. The DPC requires a Data Protection Impact Assessment, and employees with legitimate privacy concerns must be offered another way to record their time.

How many workplace inspections does the WRC carry out?
In 2025, the WRC concluded 5,145 inspection cases and found breaches of employment law in 1,775 of them.

Sources: Organisation of Working Time Act 1997, section 25; Organisation of Working Time (Records) (Prescribed Form and Exemptions) Regulations 2001; WRC Annual Report 2025; Labour Court decisions DWT219 (2021) and DWT1820 (2018); WRC Annual Report 2018 (via Peninsula Ireland); LK Shields, Working Time – Employers’ Responsibilities; HR Headquarters, Maintaining Working Time Records and Workplace Inspections: The Role of the WRC; Irish Farmers Journal, Employment Law Series: Record Keeping and Inspections; Legal Island, Recording Working Hours and Biometric Data in the Workplace; Data Protection Commission, Data Protection in the Workplace: Employer Guidance; Symmetry Compliance, Responsible Use of Biometric Data in the Workplace; CSO Earnings and Labour Costs Q2 2026; Low Pay Commission recommendation (via RTÉ and Irish Times, July 2026); Nucleus Research, From Schedules to Strategy: WFM in 2026 and WFM Returns $12.24 for Every Dollar Spent.