12.3 Automatic Number Plate Recognition (ANPR)
ANPR is normally a standalone system with dedicated cameras capable of capturing and recording images of vehicle number plates that may be later retrieved for the following purposes:-
- control of vehicle access;
- traffic management;
- parking management; and
- monitoring vehicle related health and safety issues.
Where ANPR is owned and operated by a car park management service provider under contract that organisation will be a data controller in its own right and solely responsible for Data Protection Legislation compliance.
Right to be Informed – dedicated ANPR information signs should be installed at vehicle entry points, although it may be appropriate that this information is incorporated into CCTV information signs.
Consent – due to the lawful basis of this processing consent would not be required.
Archive Retention – the recognised standard is 30 days however in setting this parameter consider how long it is likely to be before you become aware of an incident. The shorter the archive retention the less potential impact right of access and right to erasure requests will have on the business.
Public car park access and egress transaction data should not be retained unless relating to a delinquent issue and a recording is required for evidential purposes.
Privacy – access to ANPR data shall be password protected and managed on computer devices identified by unique reference numbers logged in a Controlled Data Register. The data must be deleted at the end of the archive period.
Process – to be documented using the VeriFi Compliance Manual or VeriFi EIDOS Management Information System.