cctv

Can you record people in a public car park using private CCTV without informing them first? UK Car Parks CCTV rules explained 2026

Published on

Can you record people in a public car park using private CCTV without informing them first? UK Car Parks CCTV rules explained 2026

Can you record people in a public car park using private CCTV without informing them first? UK Car Parks CCTV rules explained 2026

In the UK, the general rule is that if your CCTV system captures identifiable individuals, you must adhere to data protection principles, primarily governed by the GDPR and the DPA 2018. This does not necessarily mean you need explicit permission for every single person, but you have a duty to inform the public that they are being recorded and why. Clear signage is the most critical requirement; it must state that CCTV is in operation, the purpose of the recording (e.g., crime prevention, anti-theft), and who the data controller is. Furthermore, if the system captures areas beyond the immediate parking lot-such as adjacent public pavements or neighboring private property-you must ensure your scope is strictly limited to what is necessary for your stated purpose to avoid infringing other people's privacy rights. If you fail to inform people, the ICO (Information Commissioner's Office) could deem the processing unlawful, potentially leading to fines or legal action from affected individuals.

More questions about Car Parks:

Must car park CCTV systems cover the whole perimeter or just the main entry/exit points?

Generally, the coverage must be proportionate to the risk you are mitigating. While main entry and exit points are crucial for monitoring ingress/egress and vehicle identification, ignoring the entire perimeter could create blind spots that compromise the system's effectiveness. If theft or vandalism frequently occurs along the boundary, the CCTV system must be demonstrably able to monitor that area to be considered adequate and defensible under data protection law.

Monitoring is the act of viewing the footage in real time, often used by security staff to react to an incident. Recording is the act of saving the footage onto storage devices for later review, investigation, or evidence. While monitoring is usually seen as less invasive, the moment you save and retain the footage, it becomes 'personal data' that is subject to strict GDPR rules regarding storage limitation and retention periods.

If the car park is on rented land, do we need permission from the landowner to install CCTV?

Yes. Even if the land is the location where the car park operates, the landowner (or freeholder) usually controls the rights to place equipment. You must secure formal written permission from them before installation. Failure to do so means your system is potentially operating without the necessary legal consent, which could compromise its evidential weight in court or expose you to civil liability.

Capturing license plates is a standard and often necessary practice for theft prevention and enforcing pay-and-display rules. However, you must ensure that the system is only capturing the license plate data when it is relevant to your stated purpose. Over-collection of data (e.g., capturing unnecessary personal details) is a data protection breach and should be avoided by technical design.

Need help with CCTV surveys? Phone: 07830 638 337 for free surveys

Resources: GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b58140b23feb885d8e22f7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant