cctv

Can I record footage of people changing their vehicle registration plates in a car park? UK Car Parks CCTV rules explained 2026

Published on

Can I record footage of people changing their vehicle registration plates in a car park? UK Car Parks CCTV rules explained 2026

Can I record footage of people changing their vehicle registration plates in a car park?

Under UK law, recording the activity of changing vehicle registration plates is generally lawful, provided you have a clear legal basis, such as establishing the security of the site or investigating potential criminal activity like vehicle theft or illegal dumping. However, the capture and use of such footage must comply strictly with the GDPR and the Data Protection Act 2017. Before implementing such recording, you must assess whether the surveillance is proportionate and necessary, ensuring it does not constitute disproportionate monitoring of private citizens. You must inform all individuals, both visible and anticipated, via clear, conspicuous signage that CCTV is operating and detailing the scope of the recording. If the footage is used for anything other than the stated purpose-such as identifying individuals for general monitoring-you risk a complaint to the Information Commissioner's Office (ICO). Always consult your specific data retention policy to ensure the footage is deleted promptly once its limited purpose has been achieved.

More questions about Car Parks:

Must CCTV cover adjoining public footpaths?

If your car park adjoins a public footpath, you must generally ensure that the camera coverage is limited to your private property boundary. While you may be able to capture footage of vehicles entering or exiting from the public area, deliberately monitoring the general public movement on the footpath is likely considered excessive and potentially illegal. Your coverage must be demonstrably necessary for the security of the car park itself, and you should aim to minimise the capture of unrelated public activity.

Is ANPR data considered personal data under GDPR?

Yes, Automatic Number Plate Recognition (ANPR) data is explicitly considered personal data because it links a specific vehicle (and thus, potentially an identifiable owner) to a specific time and location. This means that any storage, processing, or sharing of ANPR data must comply with the highest standards of GDPR governance. You must define a clear retention period for the plate data and ensure that access to the raw data is restricted only to trained, authorised personnel.

Can CCTV be used to monitor employee break times in car park staff areas?

Monitoring employee break times requires extremely careful consideration of employee privacy rights under UK employment law. While monitoring may be permissible if there is a genuine security risk (e.g., theft of company assets), the monitoring must be proportionate to the risk. You must disclose this monitoring policy in the employee handbook, explaining exactly what is being monitored, when, and for what purpose, to avoid claims of excessive surveillance.

Do I need special permission to store footage for more than 30 days?

In most commercial contexts, the ICO recommends deleting CCTV footage within 30 days unless there is an ongoing, active investigation or a defined legal necessity requiring longer retention. If you require longer retention, such as for insurance claims or legal proceedings, you must document this necessity clearly and implement a strict, audit-controlled process for accessing and deleting the footage once the period expires. Failure to do so constitutes a breach of data minimisation principles.

Need to understand your CCTV legal obligations? Call us today for a free, no-obligation survey: Phone: 07830 638 337

Learn more about our services and compliance: GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant