cctv

Can CCTV record vehicle registration plates (ANPR) in a private car park without owner consent? UK Car Parks CCTV rules explained 2026

Published on

Can CCTV record vehicle registration plates (ANPR) in a private car park without owner consent? UK Car Parks CCTV rules explained 2026

When installing Automatic Number Plate Recognition (ANPR) cameras in a private commercial car park, the primary legal basis for processing the data must be carefully established, usually under the 'legitimate interests' provision of the Data Protection Act 2018 (DPA 2018) and GDPR. You must conduct a rigorous Data Protection Impact Assessment (DPIA) to prove that the benefit (e.g., theft prevention, managing access) outweighs the privacy intrusion. Crucially, the CCTV footage and ANPR data collected must be proportionate to the risk and clearly signposted to all visitors entering the site. Furthermore, you must ensure that the signage explicitly details the purpose of the ANPR system, the retention period, and the rights of the data subjects. If the system is used purely for enforcement (e.g., ticket revenue), you must ensure compliance with local council bylaws and any specific private parking enforcement legislation applicable in your region. Never assume that simply owning the land grants the right to process personal data; compliance with the UK GDPR is mandatory.

More questions about Car Parks:

Can CCTV record footage from adjacent public roads intersecting the private car park?

Generally, CCTV systems should be focused on the area within your defined private property boundary. Recording adjacent public roads may constitute monitoring areas outside your legal remit, potentially leading to data processing issues. If you do record public roads, you must clearly demarcate the boundaries of your recording area and ensure the signage warns people that the camera views public space. Furthermore, you must be prepared to justify why the data from the public road is necessary for the operation of your private car park CCTV system.

Do I need police permission to install CCTV in a shared car park with local residents?

No, you do not need police permission to install standard CCTV cameras in a private or commercial car park. However, if the car park is designated as a shared amenity, you must adhere to local council planning permissions and building regulations. Best practice dictates engaging with the local police force and council early in the design phase to ensure the system meets community expectations and is positioned optimally for both security and privacy.

While there is no single statutory limit, the recommended maximum retention period for car park CCTV footage is typically 30 days, although 7 to 14 days is often considered best practice for basic theft deterrence. You should only keep footage for as long as is strictly necessary for the stated purpose-for example, investigating an incident. After this period, the footage must be securely deleted or anonymised to comply with the data minimisation principles of the UK GDPR.

Must I notify the ICO if I use AI facial recognition in a car park?

Yes, using advanced technologies like facial recognition constitutes high-risk data processing and requires stringent adherence to UK GDPR guidelines. If you plan to use AI facial recognition to identify individuals in the car park, you must not only inform the ICO but also update your DPIA accordingly. The ICO strongly advises caution, as this technology is highly invasive and requires an exceptionally robust legal justification to prove necessity and proportionality.

Need a free, no-obligation CCTV survey for your UK premises? 📞 Call us today: 07830 638 337

View our detailed pillar guide on surveillance compliance: 👉 https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Follow us for more technical guides: 💻 GitHub: https://github.com/gazpearce/gary-ai-assistant

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant