cctv

Can you record facial images of vehicles in a UK car park? UK Car Parks CCTV rules explained 2026

Published on

Can you record facial images of vehicles in a UK car park? UK Car Parks CCTV rules explained 2026

What constitutes 'appropriate signage' for car park CCTV systems under UK law?

Under UK data protection guidelines, signage is absolutely critical to ensure your CCTV system complies with GDPR and the Data Protection Act 2018. Signs must be clearly visible, easily readable, and placed at entry and exit points, informing visitors that they are entering a monitored area. Furthermore, the signs must detail the scope of recording (e.g., "CCTV in operation"), who the data controller is, and how individuals can exercise their right to access the data. Simply placing a sign is not enough; the signage must also explain the lawful basis for the recording, such as the prevention of crime or asset protection, which manages visitor expectations and mitigates legal risk. Failure to provide adequate signage is often cited by the Information Commissioner's Office (ICO) as a primary cause of non-compliance penalties.

More questions about Car Parks:

Must I cover the entire car park area with CCTV to be compliant?

No, complete coverage is not a legal requirement, but adequate coverage is. The focus must be on covering entry/exit points, key assets, and areas where crime or anti-theft measures are most likely to occur. CCTV systems should be designed to provide proportionate surveillance, meaning the coverage must directly relate to the stated purpose and risk assessment. Using motion detection and intelligent analytics can help achieve comprehensive coverage without needing to place cameras on every single pillar or corner.

Does CCTV footage count as 'personal data' if it shows cars?

Yes, definitively. While the primary subject may appear to be a vehicle, the footage captures images of people (passersby, drivers, pedestrians) and details their movement, which constitutes biometric and personal data. Therefore, the entire system-recording, storage, and viewing-must adhere strictly to GDPR principles. This requires robust data retention policies, secure access controls, and clear explanations of data handling practices to the public.

Can I use ANPR cameras for revenue collection or just for security?

While ANPR (Automatic Number Plate Recognition) cameras are highly effective for security purposes, using them purely for revenue collection (e.g., managing parking payments) requires specific legal justification and clear consent mechanisms. If the primary goal is security, the signage must reflect this. If it is for revenue, the signage and usage policies must be transparent and compliant with local council bylaws and private property law.

Are there specific rules regarding recording areas outside the immediate car park boundary?

You must ensure that any recording that extends outside the defined private boundary (e.g., onto a public pavement or road) is minimized and legally justified. If the camera angle necessarily captures public space, you must ensure that only the area relevant to the security objective is captured. Over-recording public areas is often viewed by the ICO as an unwarranted intrusion, necessitating careful camera positioning and potentially the use of privacy masking technology.

For Free CCTV Surveys and Consultation: Phone: 07830 638 337

Resource Hub: GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant