cctv

Can CCTV capture a vehicle's license plate from across a large car park at night? UK Car Parks CCTV rules explained 2026

Published on

Can CCTV capture a vehicle's license plate from across a large car park at night? UK Car Parks CCTV rules explained 2026

Does CCTV footage taken in a public car park require specific signage regarding data retention periods?

In the UK, while there is no single piece of legislation governing all CCTV use, data retention is heavily guided by the principles of GDPR and the ICO's guidance. Generally, if the footage is not actively needed for an investigation (e.g., a specific crime or incident), it should not be kept indefinitely. Most organisations should aim to delete footage within 30 days, though this can vary based on local policy and the type of evidence being collected. Crucially, signage must inform visitors about the purpose of the cameras, who controls the data, and for how long the footage will be kept. Failure to adhere to clear signage and retention policies could lead to complaints being lodged with the ICO, potentially resulting in an enforcement notice or fine. Therefore, clear, visible signage detailing the retention period is a requirement for best practice compliance.

More questions about Car Parks:

Must car park CCTV cover all ingress and egress points?

Yes, for comprehensive evidence gathering, coverage should ideally encompass all primary entry and exit points (ingress and egress). This ensures that the entire operational perimeter is monitored, preventing individuals or vehicles from bypassing the camera system. If specific blind spots exist, this should be noted in the site's risk assessment and remediation plan. Focusing on these choke points significantly increases the value of the footage should an incident occur.

Can I film non-criminal behaviour in a private car park?

While technically you can record anything, the legal right to film in private space is limited by the expectation of privacy and the purpose of the filming. CCTV in a private car park is typically installed for security and loss prevention, not for monitoring personal behaviour. Using the footage must be proportionate and directly related to the stated purpose (e.g., theft or vandalism). Excessive or discriminatory filming could constitute an invasion of privacy.

Who owns the CCTV footage recorded in a managed car park?

Generally, the entity that owns, operates, and maintains the CCTV system (e.g., the council, private company, or landlord) is considered the Data Controller and thus owns the footage in terms of control. However, the footage also contains the personal data of the individuals who pass through. This means the operator has a legal obligation to process and store the data responsibly, acting as a custodian for the data subjects.

The use of facial recognition technology (FRT) is highly regulated and viewed with caution by UK authorities. While it is not entirely illegal, its deployment requires a robust Data Protection Impact Assessment (DPIA) and often necessitates explicit public consultation. Operators must be able to demonstrate a clear, legitimate, and proportionate reason for using FRT over less invasive methods. Without this, the system could be deemed disproportionate and illegal under GDPR guidelines.

Need a security survey for your UK car park? Call us today for a free, no-obligation survey: 07830 638 337

Learn more about our services: GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant