cctv

Can CCTV record facial recognition in UK car parks without consent? UK Car Parks CCTV rules explained 2026

Published on

Can CCTV record facial recognition in UK car parks without consent? UK Car Parks CCTV rules explained 2026

Using facial recognition technology (FRT) in a UK car park is highly complex and generally requires a high degree of justification and adherence to data protection laws. Under GDPR and the Data Protection Act 2017, processing biometric data is considered 'special category data,' meaning the bar for lawful processing is extremely high. Operators must demonstrate a clear legal basis-such as preventing serious crime or managing specific, unavoidable risks-and often require explicit consent, though consent is rarely appropriate for CCTV monitoring. Furthermore, the Information Commissioner's Office (ICO) strongly advises that FRT is a 'high-risk' technology that requires thorough Data Protection Impact Assessments (DPIAs) before deployment. Simply installing the cameras is not enough; you must prove that less intrusive methods (like simple license plate recognition or standard recording) cannot achieve the same security goal. Failure to comply can result in severe fines and legal challenge.

More questions about Car Parks:

Do I need to tell people I am recording in a private car park?

Yes, clear signage is mandatory. The signage must be conspicuous, legible, and state exactly what is being recorded, the purpose of the recording (e.g., 'To deter theft and vandalism'), and the identity of the data controller. While local bylaws might vary, good practice dictates compliance with the principles of transparency laid out by the ICO. The signs should not just say 'CCTV in Operation'; they must provide enough detail so that the public understands their rights and how the data will be handled.

Can CCTV footage be shared with the police without a warrant?

Generally, footage can only be shared with law enforcement agencies (like the Police Service) if there is a clear operational necessity and a legitimate basis, often guided by established police protocols. You must typically have a clear internal policy detailing when and how evidence can be released. If the police request the footage, you should treat it as a legal request, potentially requiring legal advice to ensure that you are not breaching the individual's privacy rights or your own data retention policies.

Are ANPR cameras covered by the same rules as standard CCTV?

While both collect personal data, ANPR (Automatic Number Plate Recognition) cameras capture specific, highly identifiable data (vehicle registration numbers). Therefore, they are subject to the same rigorous data protection standards as standard CCTV, particularly under GDPR. Simply because they are 'security equipment' does not exempt them from data protection law. You must maintain records detailing the retention period, the security measures around the stored data, and the specific purpose for which the plates are being logged.

If I replace a camera, do I need new signs?

Yes, if you significantly change the scope or function of your surveillance system, or if you are adding new camera locations, you should review and update your signage. If the physical placement of the cameras changes, it is best practice to update the accompanying signage to accurately reflect the current coverage area. Maintaining accurate, visible signage ensures that you are upholding your obligation of transparency to the public regarding the scope of the monitoring.

Need a free CCTV survey for your property? Phone: 07830 638 337

Technical Documentation: GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar Guide for CCTV Systems: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant