Can you record faces from CCTV in a public car park without notifying the public? UK Car Parks CCTV rules explained 2026
What is the minimum signage required when using CCTV in a private car park?
Under UK law, the requirement for signage is crucial for compliance with GDPR and the Data Protection Act 2018. Simply having cameras is insufficient; you must inform people that they are being recorded. Signage must be clear, visible, and prominently display the purpose of the CCTV (e.g., 'Crime Prevention' or 'Parking Enforcement'). Furthermore, the signage must detail who is operating the system (the data controller), how long the footage is kept, and how individuals can exercise their data subject rights, such as requesting access to their own data. Failure to display adequate signage constitutes a breach of data protection guidelines and could invalidate the legal basis for the recording.
More questions about Car Parks:
Is it legal to use 'License Plate Recognition' (LPR) CCTV in a private car park?
Yes, it is generally legal, but only if you have a clear legal basis and a defined purpose, such as managing unpaid parking or identifying vehicles involved in theft. You must ensure that the data collected (the vehicle registration number) is strictly necessary and proportionate to the aim. The system must be compliant with GDPR, meaning you must conduct a Data Protection Impact Assessment (DPIA) before deployment. Always notify users and ensure the data is stored securely and only used for the specified purpose.
Can local authorities force me to use CCTV in my private car park?
No, local authorities cannot unilaterally force the installation or use of CCTV in a genuinely private car park. However, if the car park is part of a larger development or is considered a 'public right of way,' the local council may have powers to enforce safety standards. You must ensure your use of CCTV is proportionate and does not infringe upon the rights of the public. Always consult the specific local authority's guidelines and seek independent legal advice regarding trespass and data rights.
Must I show a Retention Policy for my car park CCTV footage?
Absolutely. A Retention Policy is a mandatory part of good data governance under UK data protection law. This policy dictates exactly how long the footage can be stored (e.g., 7, 14, or 30 days) and the specific criteria for its deletion. You cannot keep footage indefinitely just in case it might be useful. Once the data has served its defined, legitimate purpose, it must be securely and permanently deleted to mitigate risk and comply with GDPR principles of storage limitation.
What are the rules regarding filming people walking through a car park?
While recording in a public space is often acceptable for security purposes, you must ensure that any filming remains proportionate and focused on the area you intend to monitor (e.g., vehicle entrances/exits). If the primary focus shifts to identifying individuals or monitoring behaviour unrelated to the security objective, you risk violating privacy rights. The system should be designed to capture context (e.g., the vehicle and the time) rather than focusing excessively on personal identifying information.
Need a free CCTV survey tailored to your UK premises? Call 07830 638 337
For technical support and documentation: GitHub: https://github.com/gazpearce/gary-ai-assistant
Read our comprehensive guide on CCTV legal compliance: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7
Related CCTV Guides
- Retail Shops and Stores
- Hotels and Hospitality
- Offices and Commercial Buildings
- Self Storage Facilities
- Construction Sites
Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant