Last updated: June 2026
Car park CCTV systems that capture vehicle number plates must comply with specific regulations under the Data Protection Act 2018 and the Protection of Freedoms Act 2012. ANPR cameras installed by private car park operators, retailers, or landowners must be registered with the ICO, display clear signage, retain data for strictly limited periods, and provide access to recorded data on request. Failure to comply can result in ICO enforcement action and render Parking Charge Notices unenforceable.
The Legal Basis for ANPR in Car Parks
The lawful basis for ANPR processing is typically legitimate interest, but the ICO requires a documented Legitimate Interest Assessment that specifically addresses: why ANPR is necessary (e.g., enforcing time limits, preventing unauthorised parking, supporting criminal investigations), why less intrusive methods (e.g., pay-and-display tickets, barrier systems) are insufficient, and what the legitimate interest is. The British Parking Association (BPA) and International Parking Community (IPC) codes of practice both require ANPR systems to be registered with the ICO and operated in compliance with the Surveillance Camera Code of Practice. ANPR systems used primarily for revenue generation through Penalty Charge Notices face additional scrutiny from the ICO and the Parking Ombudsman.
Signage Requirements for ANPR Car Parks
The ICO and the BPA code of practice require: at least one sign at each vehicle entrance stating ANPR is in operation, the purpose of data collection, the data controller identity, retention period, and how to request access to data. The signs must be readable from a vehicle at the entrance (minimum 100 mm character height recommended). Additional signs should be placed at intervals throughout the car park, particularly near pedestrian exits. The signs must specify that ANPR data is used for enforcement of parking terms and may be shared with the DVLA for keeper identification. Signs that are too small, poorly lit, or obscured by vegetation render Parking Charge Notices potentially unenforceable.
Data Retention and Sharing Requirements
The ICO requires ANPR data to be retained for no longer than necessary. The BPA code specifies 30 days maximum for entry/exit records not associated with a parking event. Records linked to a Parking Charge Notice must be retained until the notice is paid or the appeals process is exhausted, plus 2 years for audit purposes. ANPR data must not be shared with third parties except: the DVLA for keeper identification (which is a statutory gateway), the police for criminal investigations (with proper authorisation), and the car park landowner for enforcement of the parking contract. Sale of ANPR data to third parties for marketing or profiling is prohibited.
ANPR Camera Technical Requirements
The Surveillance Camera Commissioner’s code of practice specifies that ANPR cameras must: capture images that enable reliable Automatic Number Plate Reading in all lighting conditions relevant to the car park’s operating hours, have a minimum resolution that allows manual reading of the plate if the automatic reading fails, be time-synchronised to ensure entry and exit records can be matched, and retain audit logs of all access to ANPR data for minimum 12 months. The cameras must be positioned to capture the rear number plate for entry (UK vehicles) and the front number plate for exit. The IR illuminators used for ANPR must not be directed at vehicle windscreens at driver eye level, which is a safety hazard.
Video: Add Any Camera to Home Assistant + Dashboard Integration!
Frequently Asked Questions
1. Do I need special ANPR cameras for my car park?
Answer: Yes. ANPR cameras have specific requirements: IR illuminators for 24-hour operation, resolution sufficient for reliable plate reading, correct positioning for rear entry / front exit plates, and DVLA compliance for the specific application. For more detail, see Best CCTV cameras for Offices and Commercial Buildings in 2026 - UK buyer guide. Also read our related guide: Hikvision vs Dahua Ecosystem Comparison. Browse our security technology hub at Uni Blog Security Hub. Official UK guidance on this topic: BSI.
2. What signage is needed for ANPR in UK car parks?
Answer: A4 or larger signs at each vehicle entrance stating ANPR is in operation, purpose, data controller, retention period, and how to access data. Additional signs throughout the car park and near pedestrian exits. For more detail, see Care Homes and Assisted Living CCTV - ultra-long-tail-legal (2026). Also read our related guide: Reolink vs Annke: Value Proposition for UK Users.
3. How long can I keep ANPR data?
Answer: 30 days maximum for entry/exit records not associated with a parking event. Records linked to Parking Charge Notices must be kept until the notice is resolved plus 2 years for audit purposes. For more detail, see Best CCTV cameras for False Alarm Reduction in 2026 - UK buyer guide. Also read our related guide: Eufy vs Ring: Privacy Differences for UK Users.
4. Can I share ANPR data with third parties?
Answer: Only with the DVLA for keeper identification, the police with proper authorisation, and the landowner for enforcement. Sale of ANPR data for marketing or profiling is prohibited. For more detail, see Can I record public areas from a construction site? UK Construction Sites CCTV rules explained 2026. Also read our related guide: Wired vs Battery AI Performance Comparison.
5. Are Parking Charge Notices enforceable without compliant ANPR?
Answer: No. A Parking Charge Notice can be challenged if the ANPR system does not comply with the BPA or IPC code of practice, the signage is inadequate, or the data retention policy is non-compliant. Also read our related guide: Indoor vs Outdoor Cameras: Can You Use the Same Camera?.
Conclusion
The difference between a security system that works and one that frustrates is understanding the real-world behaviour of cameras, cables, and the environment they operate in. Manufacturers sell specifications. Installers solve problems. The questions above represent the issues that UK homeowners and businesses actually face — the ones the spec sheets do not mention.
Article by Gary Pearce, qualified security systems engineer. For a free security assessment, visit gary-pearce-home-services.pages.dev. This guide was last updated June 2026. Verify current UK regulations with the ICO.