Tesco & Horizon caught out

steve1500

To comply with DPA 1998 you must issue a fair processing notice, which only requires that information will be obtained from the DVLA and the details of the Data Controller.

No fair processing notice, no collecting or processing personal information, except in exceptional circumstances or using for personal use.

Under Article 13 of GDPR which will become DPA 2017 they will still have to issue a fair processing notice.

I was staying away for as long as possible, no point on giving advance warning their signage will be no good as a fair processing notice

Article 13 states what must be included in a fair processing notice and requires far more information.

So if your information has been processed without a fair processing notice, fill your boots

A Data Controller or a Data Processor can be both / jointly liable for a breach of DPA 2017.

Everyone & I mean everyone who enters a car park that has ANPR should make a Subject Access Request on 26th May 18 or later it will be free.

You will have to supply the car reg, obviously & be pretty close to entry & exit times.

You should then receive two happy snaps of the vehicle entering & leaving. If they fail to provide within a month report them to the Information Commissioner