Share location only when needed: a guide to data minimisation

Start with a ladder, not the richest option

Use this sequence: no location when it is unnecessary; a description or agreed place when enough; one point to show where the device is at that moment; live updates only when following movement serves the task.

The GDPR defines minimisation as data adequate, relevant and limited to what is necessary. The EDPB recommends asking whether the purpose can be met with less data, less detail or no personal data. This is a contextual test, not a rule that “less” always wins.

Purpose, consent and recipients come first

Write the purpose in one sentence: “meet at the entrance”, “attach a place to this signal”, or “coordinate this journey until 18:00”. If the end and duration cannot be stated, the sharing plan is probably still too vague.

Consent should be understandable, specific and revocable in the family arrangement. Show who will see the data: one chat, every current group member, or selected approved contacts. Consent for one journey does not become permission for permanent monitoring.

Different channels expose different data

WhatsApp documents live location in a chat for a selected period and a stop control. A single location or written address may be enough for a meeting; check the recipient or all group members before sending.

In My Safe Circle, location is optional and accompanies one SOS, ALL OK or reply; it does not start continuous tracking. Apple and Android let people review or deny app location access. System permission and the sharing choice inside a service are separate decisions.

Set duration and stopping before sharing

For live sharing, agree purpose, audience and stop time first. Stopping updates does not make recipients forget what they already saw, saved or captured. One point has no future stream to stop, but the sent item remains under the channel’s rules.

Choosing not to share is valid. Prepare an address, landmark, call or backup contact. Location describes a device within limits of sensors, settings, environment, battery and connectivity; it does not establish where a person certainly is or how they are.

A practical minimisation matrix

The suitable amount changes with the purpose and should be chosen with the person concerned.

Rehearse and keep the plan current

Run an announced rehearsal: inspect names and members, the location icon, duration, stop control and permissions. Also test the no-location route and whether everyone can describe a place.

Review after a new phone, group, contact or routine. Deletion, retention and reporting depend on the service and on who processes data; obtain qualified advice for legal or organisational decisions. For immediate danger, call 112 in the EU or the local number.

Concrete example: For “Share location only when needed: a guide to data minimisation”, Continuous tracking exposes a recent device location over an extended period and may help agreed coordination, while creating more observation and more chances to infer too much from a map point. Keep the choice proportionate to purpose and the person’s preferences; if this route does not fit, use the second channel or appropriate local service without inferring delivery, understanding, or intervention.

• Purpose written in one sentence?
• No location or less detail considered?
• Recipients visible and agreed?
• Duration and stopping rehearsed?
• Map-free fallback available?

Frequently asked questions