Parking and Traffic Enforcement
To comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.
Contact details of this Lancashire County Council service
Note that for queries intended for this specific service, do not contact the Data Protection Officer (DPO) mailbox, instead please direct your query to the following point of contact:
Reasons for processing your personal data
Lancashire County Council processes personal data for the purposes of administering and enforcing parking, bus lane and moving traffic restrictions across Lancashire. This includes:
Investigating, managing and enforcing parking contraventions, bus lane contraventions and moving traffic contraventions in accordance with relevant legislation.
Identifying registered keepers, vehicle owners, drivers and other individuals connected to a contravention.
Issuing Penalty Charge Notices (PCNs), statutory notices, correspondence and other enforcement documentation.
Considering and responding to challenges, representations, appeals and enquiries relating to enforcement action.
Processing payments, refunds and outstanding charges associated with parking, bus lane and moving traffic enforcement activities.
Recovering unpaid penalties and progressing enforcement action where penalties remain outstanding.
Detecting, preventing and investigating fraud, misuse, criminal activity or other unlawful behaviour connected with parking and traffic enforcement.
Maintaining accurate records of enforcement activity, correspondence, evidence and decisions.
Meeting the Council's legal, regulatory and audit obligations and demonstrating compliance with applicable legislation.
Producing management information, statistical analysis and service performance reporting to support the effective delivery of parking and traffic enforcement services.
Supporting road safety, traffic management, network efficiency and compliance with traffic regulations for the benefit of residents, businesses and visitors within Lancashire.
This processing may involve information obtained directly from you, captured through approved enforcement technology (including CCTV, Automatic Number Plate Recognition (ANPR) and other enforcement camera systems), or received from third parties such as the Driver and Vehicle Licensing Agency (DVLA), enforcement agents, representatives and appeal bodies.
Use of artificial intelligence (AI) technologies
We are increasingly utilising AI technologies to process your personal data. This is primarily utilised within Lancashire County Council using Microsoft Copilot Basic and Microsoft Copilot Premium. Please consult our Artificial Intelligence privacy notice for more details of how we use these specific platforms.
Within the Parking and Traffic Enforcement service, AI technologies may be used to support administrative activities and improve service efficiency. Any use of AI is subject to appropriate governance, security and human oversight.
Examples of how AI may be used include:
Assisting officers with drafting correspondence, reports, responses to enquiries and other administrative documents relating to parking, bus lane and moving traffic enforcement.
Summarising information contained within case records, representations, appeals, legislation, policies and guidance to support officer decision-making.
Helping officers analyse and organise information from enforcement cases to improve efficiency and consistency.
Supporting the preparation of service reports, statistics, performance information and management information.
Assisting with information retrieval, research and knowledge management activities relating to parking and traffic enforcement functions.
Where personal data is processed using AI tools:
AI is used only as a support tool and does not replace officer judgement.
Enforcement decisions, including the issue, review, cancellation or progression of Penalty Charge Notices (PCNs), are always reviewed and authorised by appropriately trained officers.
No decisions that produce legal or similarly significant effects are made solely through automated processing or AI technologies.
Personal data is processed in accordance with Lancashire County Council policies, data protection legislation and relevant information security requirements.
Appropriate human oversight is applied to all AI-generated outputs to ensure accuracy, relevance and fairness.
The Council does not use AI technologies to make fully automated decisions regarding parking, bus lane or moving traffic enforcement. All enforcement actions remain subject to human review and intervention.
Legal basis for processing personal data
The legal basis for processing your personal data under Article 6 of the UK General Data Protection Regulation (UK GDPR) is:
Article 6(1)(c) - Legal Obligation
Processing is necessary for Lancashire County Council to comply with legal obligations relating to the administration and enforcement of parking, bus lane and moving traffic restrictions, including the recovery of unpaid penalties and the consideration of representations and appeals.
Relevant legislation includes:
Traffic Management Act 2004
Civil Enforcement of Road Traffic Contraventions (Approved Devices, Charging Guidelines and General Provisions) (England) Regulations 2022
Civil Enforcement of Road Traffic Contraventions (Representations and Appeals) (England) Regulations 2022
Road Traffic Regulation Act 1984
Local Authorities' Traffic Orders (Procedure) (England and Wales) Regulations 1996
Tribunals, Courts and Enforcement Act 2007 (where enforcement action is required for unpaid penalties)
Article 6(1)(e) - Public Task
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Lancashire County Council.
This includes:
Managing and enforcing parking restrictions, bus lane restrictions and moving traffic restrictions.
Promoting road safety and compliance with traffic regulations.
Reducing congestion and improving the efficient movement of traffic on the highway network.
Investigating contraventions and issuing Penalty Charge Notices (PCNs).
Considering representations, challenges and appeals.
Maintaining effective traffic management and enforcement services across Lancashire.
These functions are exercised under powers and duties contained within:
Traffic Management Act 2004
Road Traffic Regulation Act 1984
Transport Act 2000 (bus lane enforcement)
Traffic Signs Regulations and General Directions 2016
Any associated regulations, statutory guidance and traffic enforcement legislation applicable to civil parking, bus lane and moving traffic enforcement.
Legal basis for processing special categories of personal data
The Parking and Traffic Enforcement service does not routinely process special category personal data. However, in limited circumstances, special category information may be received where an individual provides information in support of a challenge, representation, appeal, complaint or request for reasonable adjustments.
This may include information relating to health, disabilities or other circumstances relevant to the case.
Where special category personal data is processed, the legal basis under Article 9 UK GDPR is likely to be:
Article 9(2)(f) - Legal claims
Processing is necessary for the establishment, exercise or defence of legal claims, or whenever courts or tribunals are acting in their judicial capacity.
This may apply where special category personal data is provided:
As evidence in support of representations against a Penalty Charge Notice (PCN).
During appeals to the Traffic Penalty Tribunal.
In connection with debt recovery, enforcement proceedings or other legal processes.
To enable the Council to consider mitigating circumstances and appropriately respond to challenges, complaints or disputes.
Article 9(2)(g) - Substantial public interest
Processing is necessary for reasons of substantial public interest.
Where this condition is relied upon, the relevant basis under Schedule 1, Part 2 of the Data Protection Act 2018 may include:
Paragraph 6 - Statutory and government purposes, where processing is necessary for the exercise of a function conferred on a person by an enactment or rule of law.
Paragraph 18 - Safeguarding of children and individuals at risk, where relevant information is provided as part of a representation, appeal or enforcement case.
Paragraph 10 - Preventing or detecting unlawful acts, where necessary and proportionate in connection with the investigation of suspected contraventions or fraudulent activity.
Legal basis for processing criminal offence data
The Parking and Traffic Enforcement service does not routinely process criminal offence data. However, in limited circumstances, information relating to alleged offences, contraventions, fraudulent activity, enforcement proceedings or matters referred to the courts may be processed where this is necessary to carry out the Council's statutory functions.
Where criminal offence data is processed, Lancashire County Council will do so in accordance with Article 10 UK GDPR and Schedule 1 of the Data Protection Act 2018.
Information we process about you
To carry out parking, bus lane and moving traffic enforcement activities, Lancashire County Council may collect, use and store the following types of personal information:
Name and title.
Home address and correspondence address.
Email address and telephone number.
Vehicle registration mark (VRM) and vehicle details.
Driver and Vehicle Licensing Agency (DVLA) registered keeper information.
Payment and transaction details relating to Penalty Charge Notices (PCNs).
CCTV, Automatic Number Plate Recognition (ANPR), body-worn video and other enforcement camera images or footage.
Photographs and evidential records relating to alleged parking, bus lane or moving traffic contraventions.
Correspondence, representations, appeals, complaints and enquiries submitted by you or your representative.
Details of challenges, appeals and enforcement decisions.
Records of communications between you and the Council or its contractors.
Information provided to support requests for discretionary consideration, mitigation, exemptions or reasonable adjustments.
Information received from third parties involved in the enforcement process, including enforcement agents, the Traffic Penalty Tribunal, legal representatives and other public authorities where appropriate.
In limited circumstances, we may also process:
Health or disability information where you provide this to support a representation, appeal, complaint, request for reasonable adjustments, or application for a permit, exemption or concession.
Information relating to alleged unlawful activity, fraud, court proceedings or enforcement action where relevant to the administration of Parking and Traffic Enforcement services.
We will only collect and process personal information that is relevant, necessary and proportionate for the purposes described in this privacy notice.
Recipients of the personal data that we process about you
To deliver parking, bus lane and moving traffic enforcement services, Lancashire County Council may share your personal information with the following organisations where this is lawful, necessary and proportionate:
Driver and Vehicle Licensing Agency (DVLA), to obtain registered keeper information and support enforcement activities.
Traffic Penalty Tribunal, where representations or appeals are submitted against a Penalty Charge Notice (PCN).
Enforcement agents (bailiffs) and debt recovery organisations, where enforcement action is required for unpaid penalties.
HM Courts & Tribunals Service (HMCTS) and other courts or tribunals, where matters progress through formal legal processes.
Police forces and other law enforcement agencies, where there is a lawful basis to share information for the prevention, detection or investigation of crime or unlawful activity.
Department for Transport (DfT) or other government bodies, where required by law or for regulatory purposes.
District and Borough Councils within Lancashire, where they are acting on behalf of Lancashire County Council or are involved in enforcement, representation or appeal processes.
Parking and traffic enforcement contractors and system providers, who provide services on behalf of Lancashire County Council, including notice processing, CCTV enforcement systems, payment processing and case management systems.
Payment service providers, to facilitate the collection and processing of PCN payments.
Legal representatives, solicitors and insurers, where necessary in connection with legal proceedings, claims or disputes.
Auditors, regulators and inspection bodies, where disclosure is required to comply with legal, regulatory or governance obligations.
Other public authorities or organisations, where information sharing is permitted or required by law and is necessary to support parking, bus lane or moving traffic enforcement activities.
All sharing of personal information is undertaken in accordance with UK data protection legislation, applicable information sharing agreements and the Council's information governance requirements. We will only share the minimum personal information necessary to fulfil the relevant purpose.
Any transfers to another country
Lancashire County Council does not routinely transfer personal data processed for Parking and Traffic Enforcement purposes outside of the United Kingdom. Personal data used for parking, bus lane and moving traffic enforcement is normally stored and processed within the UK.
In some circumstances, personal data may be processed using information technology systems or cloud-based services provided on behalf of the Council. Where this results in a transfer of personal data outside the UK, Lancashire County Council will ensure that appropriate safeguards are in place to protect your information.
Any such transfers will be carried out in accordance with UK data protection legislation and will be subject to one of the permitted transfer mechanisms under the UK GDPR
Retention periods
Lancashire County Council will only retain personal information for as long as is necessary to fulfil the purposes for which it was collected, to meet legal and regulatory requirements, and to support the administration and enforcement of parking, bus lane and moving traffic contraventions.
Personal information is held securely in accordance with the Council's Information Security Policies, Records Management Policies and Retention Schedule. Information that is no longer required will be securely deleted or destroyed.
File type | Description | Security | Retention period |
|---|---|---|---|
Parking and Traffic Enforcement case records | Records relating to parking, bus lane and moving traffic contraventions, including Penalty Charge Notices (PCNs), notices, representations, appeals, evidence and correspondence | Access restricted to authorised staff and approved contractors. Information stored within secure Council systems. | 6 years from case closure |
CCTV, ANPR and enforcement camera images/footage | Images and recordings captured for the purposes of detecting, investigating and enforcing parking, bus lane and moving traffic contraventions | Stored within secure enforcement systems with controlled access and audit logging where appropriate. | Up to 6 weeks then overwritten. If needed for an investigation or incident occurs, 7 years from case closure. |
Correspondence and communication records | Emails, letters, online submissions, complaints, enquiries and telephone records relating to Parking and Traffic Enforcement matters | Stored within secure Council systems and protected by access controls. | 6 years from final correspondence |
Payment and financial records | Records relating to PCN payments, refunds, debt recovery and associated financial transactions | Stored within secure financial and enforcement systems with appropriate access controls. | 6 years from financial year end |
Appeal and tribunal records | Documentation relating to appeals submitted to the Traffic Penalty Tribunal and any associated decisions | Stored securely and shared only where necessary for the appeals process. | 6 years from appeal decision. |
Audit, performance and management information | Statistical, reporting and audit records relating to Parking and Traffic Enforcement services | Access restricted to authorised personnel. | 6 years |
Your rights
You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are those rights:
to be informed via Privacy Notices such as this.
to withdraw your consent. If we are relying on your consent to process your data, then you can remove this at any point.
of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this, we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
of rectification, we must correct inaccurate or incomplete data within one month.
to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.
If you want to exercise any of these rights, then you can do so by contacting:
Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ
Email: dpo@lancashire.gov.uk
To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.
Identity and contact details of the data controller
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Contact details of the data protection officer
Our Data Protection Officer is Joanne Winston. You can contact her at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Further information
For more information about how we use personal information see Lancashire County Council's full privacy notice.
If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).