Keeper data before proof is tested
The DVLA data request can happen before an independent body or court has checked whether the charge is actually valid.
Check a parking charge
The priority here is the private parking sector. Council parking is secondary because it follows a different statutory route, with different notices, deadlines, representations, tribunals, and enforcement steps.
First split
A private parking charge is usually a contract claim from a company managing private land. A council Penalty Charge Notice is a public-law penalty issued under a statutory system. GOV.UK says private tickets go through the issuer and then POPLA or IAS if the operator belongs to the right trade body; council PCNs use council challenge, formal representation, and tribunal routes.
Step-by-step
Use this before paying, appealing, naming the driver, or replying to debt letters. It is public guidance, not legal advice.
Check whether the notice says Parking Charge Notice from a private company, Penalty Charge Notice from a council or TfL, Fixed Penalty Notice, toll charge, airport/rail/byelaw notice, or something else.
Record the issue date, date received, discount date, appeal deadline, POPLA or IAS code deadline, and any Letter Before Claim or court deadline. Do not ignore formal court papers.
Was it private land, a road, railway land, airport land, hospital land, residential land, a leaseholder bay, or a site with byelaws? Was the event actual parking, or queuing, loading, drop-off, a double visit, or failed payment?
Ask whether the terms were visible before parking, readable in the conditions, clear about the charge amount, and consistent across the site. Photograph the entrance sign, tariff board, machine, app code, and any damaged or hidden signs.
Look for bank transactions, app receipts, machine tickets, location-code mistakes, old vehicle registrations, typos, failed app screens, phone signal problems, and payment-machine faults.
If the keeper is being pursued, check whether the notice is relying on Protection of Freedoms Act Schedule 4 and whether the wording, dates, land, creditor details, and required warnings are present.
If a non-visible disability, dyslexia, ADHD, autism, anxiety, low literacy, medical distress, memory difficulty, or app barrier affected the event, ask for a pause, accessible communication, and human review. Share only evidence you are comfortable sharing.
Attach concise evidence. Ask the operator to show the contract/signage evidence, ANPR logs, payment matching, machine or app outage records, grace/consideration period handling, and the disability adjustment route used.
BPA operators usually point to POPLA. IPC operators usually point to IAS. Council PCNs do not use this route; they use the statutory council and tribunal process.
Debt letters are pressure, but a Letter Before Claim and County Court claim need proper attention. Keep everything, reply on time, and get case-specific help if a claim is threatened or issued.
Spot the loopholes
The DVLA data request can happen before an independent body or court has checked whether the charge is actually valid.
Entry and exit images can miss queues, drop-off, loading, double visits, app failure, or time spent reading terms.
A typo, saved old registration, wrong app zone, or location-code confusion can make a paying driver look unpaid.
If a site never mentions non-visible disability or accessible appeal support, people may be pushed into standard scripts when they need a different route.
Definitions
Protection of Freedoms Act 2012 Schedule 4 allows keeper liability in England and Wales where conditions are met. The Parking (Code of Practice) Act 2019 requires a statutory code, but the replacement code is still being finalised.
Airports, ports, some railway sites, and other statutory-control land can involve byelaws. The private parking route can differ, so these cases need careful separation.
The operator says the driver accepted displayed terms by parking. The charge is then pursued as a contractual charge or damages route, not a public-law penalty.
Data route
To send a postal charge or pursue an unpaid windscreen charge, an operator needs the registered keeper address. The government consultation says operators must demonstrate reasonable cause and be members of a DVLA-accredited trade association. The DVLA guidance also says evidence and audit trails must be kept for at least two years.
False positives
Yes, in practical terms. The data request can happen because an operator asserts reasonable cause. If the ANPR read, payment match, machine status, signage, or land status is wrong, the system relies on later correction through appeal, cancellation, complaint, audit, or court.
Entry and exit images can miss context: queuing, circling, failed payment, double visits, loading, drop-off, or a vehicle leaving and returning.
A driver may have paid but entered the wrong registration, old vehicle, wrong app location, or had a payment-machine failure.
Relevant land, byelaws, roads, public highway records, and leaseholder rights can change the legal analysis.
The audit should ask who reviews disputes, what evidence they see, what training they have, and whether they can cancel without financial pressure.
Report the data issue
A cancelled or false parking charge does not automatically prove that DVLA data was misused. But it should still be recorded, because false positives are how weak systems stay invisible. DVLA has complaint and data-protection routes, and its own guidance says complaints are logged and scrutinised. No dedicated public false-positive dashboard was found in this source pass.
DVLA publishes data-request volumes, but not a public register showing how many private parking lookups later turned out to be false, cancelled, wrong-keeper, wrong-land, or unsupported.
Appeal the charge and send a data complaint to the operator. Ask for the DVLA request date, reason for access, evidence file, landowner authority, data recipients, retention period, and why processing should continue if the charge is false.
Use a DVLA subject access request if you need the vehicle data held about you, or ask DVLA to confirm who requested keeper data for the event. Keep it narrow: vehicle registration, event date, parking company, and notice reference.
If the operator is BPA or IPC, complain to the operator first, then escalate to the trade association if the complaint outcome does not address the breach. This helps build the sanctions trail.
Complain to DVLA if the request looks unsupported: wrong vehicle, wrong date, no private land, no landowner authority, no ATA route, no evidence file, or continued data use after the charge was cancelled.
The ICO expects you to complain to the organisation first. If there is no response after one month, or the answer is poor, complain to the ICO with letters, screenshots, cancellation proof, and your data complaint.
Medical, neurodivergent, low-literacy, debt, or hardship evidence should be sent only where needed, with consent and redaction. Ask for accessible communication and a pause while the data complaint is reviewed.
Before DVLA access
This is the core loophole. DVLA guidance says private car park enforcement companies can request keeper-at-date-of-event information to establish liability and recover costs where a vehicle has breached private car park terms. But the request is not a court finding. It is a permission route controlled by evidence files, ATA membership, contract terms, and audit.
| Before access | What DVLA guidance asks for | Public audit question |
|---|---|---|
| Parking company status | Membership of a DVLA Accredited Trade Association and compliance with that association's code of practice. | Was the operator an AOS/ATA member on the event date and request date? |
| Incident detail | Vehicle registration, make and model, incident date, location, and whether ticketing, ANPR, or CCTV was in place. | Was the date, location, vehicle, and event type correct, or was this a double visit, cloned plate, wrong site, or public-road issue? |
| Land authority | A copy of the agreement between the landowner and the car parking company. | Did the operator have authority for that land and that type of enforcement? |
| Evidence file | Hardcopy evidence for each enquiry, such as photographs, notices, and tickets, kept for audit. | Was there an evidence file before the DVLA lookup, not built later after challenge? |
| Windscreen ticket timing | Auditors should be able to see that no enquiry was made until the time allowed to pay or appeal a windscreen charge had elapsed. | Did a windscreen notice wrongly become an immediate DVLA request? |
| Retention and deletion | Evidence must be kept for at least two years, and personal data received from DVLA must be deleted once finished with. | Did the company stop processing and delete data after cancellation, wrong-keeper proof, or no reasonable cause? |
The KADOE API shows how structured electronic access can work once the company has credentials: registration number, enquirer ID, reason code, event date, and reference number. That is why the audit question is not only "was access lawful?" but "who checked the facts before the request, and who counts false positives afterwards?"
Appeals and court
POPLA recorded 98,110 appeals received in its 2024 reporting year. Operators did not contest 23,800 of them, and 40% of completed appeals resulted in cancellation. That raises an obvious research question: why were so many charge demands still issued before cancellation?
Ask whether the operator has a real review function or a narrow rejection script. Track cancellation reasons.
The current system has two second-stage services, linked to the two accredited trade associations. Government has noted negative public perception of second-stage appeals.
There is no clean public table of all private parking claims, wins, losses, discontinuances, settlements, and defaults. That is one of the most important FOI/data tasks.
Correction signals
These figures are from POPLA's 2024 report. They are not a whole-sector error rate because they only cover cases that reached POPLA.
completed POPLA appeals where the parking charge was cancelled.
appeals operators chose not to contest, which resulted in cancellation.
mitigating-circumstance cases POPLA referred back to operators for goodwill cancellation.
of those mitigating-circumstance referrals were cancelled by operators.
sector-wide counts for ANPR double visits, machine faults, app faults, wrong-registration payments, and accessibility failures.
Data labels
Keeper data request volumes and POPLA appeal outcomes are usable public indicators, with clear caveats.
Claims, discontinuances, defaults, defended wins, losses, first-stage cancellations, and site-level error rates need deeper extraction.
Individual medical, neurodivergent, literacy, debt, or household-cost evidence should not be published without consent and careful anonymisation.