PCNs and Data Protection

AnnKB

I recently successfully challenged a PCN and the council's letter stated that although the PCN was cancelled they kept all details on file so if a PCN was issued under similar circumstances it would be enforced.
I have no intention of getting another one and it was my first in over 20 years of driving but my query is - surely it is against Data Protection for them to keep named data on PCNs on file as you are supposed to keep data only 'for as long as necessary' which I presume would be the admin of the PCN?

It is pretty vague, are the council allowed to state how long 'necessary' is? I have emailed their data protection address to enquire how long they keep the data and am awaiting a response.
Does anyone have personal knowledge/experience in this area?
thanks

Coblcris

You may have a point.
the council may deem it necessary (forever) but will the ICO ?

However if there was a blue badge issue involved then the council may have a point.

AnnKB

No blue badge involved. Just a reduction in maximum allowable time in a market place car park with no signage going into the car park and only one on the way out-amongst other issues which they have accepted.
I'm just uncomfortable with personal data being held in this way escpecially if the PCN has been cancelled.
I will await their response then contact the ICO.
I've worked within information governance in the NHS but am not familiar with it in this setting.

peter_the_piper

This could have interesting results, maybe wander over to pepipoo.com and post this there, they may have come across this point before.

taffy056

http://www.ico.gov.uk/for_organisations/data_protection/the_guide/information_standards/principle_5.aspx

This is the fifth data protection principle. In practice, it means that you will need to:

securely delete information that is no longer needed for this purpose or these purposes; and

http://www.ico.gov.uk/Global/faqs/data_protection_for_organisations.aspx#f2642022B-8A14-4897-90ED-AD7019C0F812

Q: How long should organisations keep data for?

The Data Protection Act says that information should be kept for no longer than is necessary. The Act does not specify what a ‘necessary’ period should be for particular information. Each case would be considered on its own merits. If an organisation is obliged to retain data for a given length of time under any other laws, this should be taken into consideration.


For example, financial institutes may have to keep some information for up to six years in accordance with the Financial Services Authority regulations. A sole trader, however, may not need to keep information for longer than a month.