The Bangladesh Road Transport Authority (BRTA) made GPS, or Vehicle Tracking System (VTS), mandatory for public transport vehicles from August 1, with the stated objectives of reducing road accidents, controlling reckless driving and bringing greater discipline to public transportation. However, the initiative has come under scrutiny from the outset over data security, additional costs, inadequate preparation and allegations of fraudulent certificates.
According to an investigation, at least 11 of the 27 VTS companies approved by BRTA are using foreign servers. The servers or IP addresses associated with these companies have been traced to countries including the United States, Singapore, India, Lithuania and Germany. This raises questions because Clause 5.05 of the Bangladesh Telecommunication Regulatory Commission’s (BTRC) VTS licensing guidelines reportedly prohibits licensed operators from carrying or transmitting international voice or data traffic.
The use of foreign infrastructure creates potential risks involving the storage and processing of real-time location data, travel histories, routes and timing information generated by a large number of vehicles in Bangladesh. Information technology experts warn that such data can potentially reveal an individual’s regular movements, residence, workplace and travel patterns. If such data is leaked or misused, it could create risks to personal safety, facilitate targeted crime and enable the profiling of the movements of important individuals.
Officials of the BTRC have acknowledged that the use of foreign servers by some VTS licensees has come to their attention. However, there is still no clear explanation as to how companies allegedly violating the licensing conditions were granted VTS licenses in the first place.
Questions Over GPS Device Pricing
The pricing of GPS devices has also raised concerns. While basic 4G vehicle tracking devices are available in the market for approximately Tk 400 to Tk 1,200, transport operators are reportedly being charged between Tk 3,000 and Tk 5,000 for similar devices by BRTA-approved vendors. In addition, vendors are charging monthly service fees of Tk 300 to Tk 400, or in some cases around Tk 3,500 annually.
There are approximately 1 million registered commercial vehicles in Bangladesh, including three-wheelers. If an average of Tk 4,000 is paid for each GPS device, the total installation cost would amount to approximately Tk 400 crore. At an average annual service charge of Tk 3,500 per vehicle, an additional Tk 350 crore would be required. This means the combined cost of the devices and one year of service could reach approximately Tk 750 crore.
Mandatory System Introduced Without Adequate Preparation
One of the most serious concerns relates to BRTA’s own preparedness. The list of VTS providers circulated to BRTA’s circle offices contains the phrase “Test API Connect” in the remarks column. However, there appears to be no clearly established infrastructure for collecting, storing and analyzing data from the different VTS providers, or for using that information effectively to improve road safety and traffic discipline.
Questions have also been raised about BRTA’s capacity to manage servers and ensure data security, including whether it has sufficient specialized personnel for these tasks.
In June, BRTA appointed Geo Planning for Advanced Development Limited (G-PAD) as a consultant for Tk 23 lakh to conduct a feasibility study and prepare a technical roadmap for the GPS project. The company’s principal areas of experience include drone surveying, GIS mapping and urban planning. Questions have nevertheless been raised about its previous experience in large-scale live GPS tracking, API security and fleet-management infrastructure.
G-PAD has said that it plans to submit a draft feasibility study by August 2026 and complete the overall consultancy work, including preparation of the Development Project Proposal (DPP), by October.
Allegations of Fake Certificates
Within days of the GPS system being introduced, allegations of fraudulent GPS certificates also emerged. An investigation found that fitness certificates for two buses had reportedly been renewed at the Mirpur BRTA office using certificates issued in the name of a VTS company that claimed it had not yet begun issuing any certificates.
BRTA officials have acknowledged that the absence of a digital certificate-verification system created an opportunity for fraud. Therefore, installing GPS devices alone is not sufficient; the entire process of certificate verification and data exchange must also be made digital, secure and independently verifiable.
Another weakness is the reported practice of vehicle owners purchasing only one month of VTS service to obtain or renew their fitness certificates. If the service is discontinued after the first month, BRTA may have no reliable way of knowing whether the vehicle’s GPS device remains active or where the vehicle is operating. This could undermine the fundamental objective of mandatory GPS tracking.
Will BRTA Learn From Its Past Failures?
BRTA’s previous experience with technology-driven projects has also raised concerns. In 2012, digital number plates incorporating RFID technology were introduced with promises of preventing vehicle theft and enabling real-time tracking. Although vehicle owners were charged several thousand taka for the system, questions have remained over whether the expected long-term services were actually delivered.
Similarly, in 2021, CCTV cameras and an Intelligent Traffic Management System were installed along the Dhaka–Chattogram highway at a reported cost of approximately Tk 152 crore. Although cameras were installed at 147 locations, a significant portion has reportedly become non-functional due to inadequate maintenance and problems connecting them to the central server.
GPS tracking can undoubtedly play an important role in improving road safety, controlling vehicle speeds and monitoring public transportation. But installing tracking devices without establishing a robust data-management and security framework could create new risks rather than solve existing problems.
BRTA must clearly define data ownership, server locations, encryption standards, access controls, audit mechanisms, cybersecurity monitoring, backup systems and disaster-recovery arrangements. It must also ensure transparency in device prices and service charges, establish clear criteria for selecting VTS providers and introduce real-time digital verification to prevent fraudulent certificates.
Otherwise, the GPS initiative could impose significant additional costs on transport operators while simultaneously exposing sensitive location data to security risks. To prevent a repeat of previous technology projects that failed to deliver their promised benefits, BRTA needs a realistic implementation plan, strong oversight, transparency and clear accountability before expanding the system nationwide.