Subject Access Request — Operator Fails to Respond Within 30 Days
A Subject Access Request (SAR) requires the data controller to provide all personal data held within 30 calendar days. Failure to respond is a breach of the DPA 2018 / UK GDPR and must be reported to the ICO. Filing a SAR also forces the operator to disclose all evidence and internal notes — this often reveals procedural defects, incorrect information, or lack of evidence to support the PCN.
Legal basis
UK GDPR Article 15; Data Protection Act 2018 s.45; Information Commissioner's Office enforcement
How to identify this in your case
Always file a SAR as early as possible in any parking dispute. Send to the operator's Data Protection Officer (identifiable from their privacy notice / ICO register). Include your name, address, vehicle registration, and PCN reference. Set a calendar reminder for 30 days.
Sample appeal wording
TO: [Data Protection Officer / Legal Department] SUBJECT ACCESS REQUEST Dear Data Controller, Re: Subject Access Request under UK GDPR Article 15 I formally request copies of all personal data you hold relating to me in connection with: - Vehicle registration: [REG] - PCN/charge reference: [NUMBER] - Date of alleged contravention: [DATE] My full name is [NAME] and my address is [ADDRESS]. Please provide, within 30 days: 1. All CCTV/ANPR images and footage relating to my vehicle 2. All internal notes, correspondence, and records relating to this PCN 3. All data obtained from the DVLA, including the date of request and KADOE contract reference 4. The identity of all third parties to whom my data has been provided Failure to respond within 30 days will result in a complaint to the Information Commissioner's Office. Yours faithfully, [NAME] [DATE]
Replace [PARKING DATE], [NtK DATE] etc. with your own dates before sending.
Beat It writes this argument automatically
Scan your PCN — our AI checks if this ground applies to your specific ticket, drafts a properly-cited appeal letter, and submits it to the council on your behalf. Only pay if you win.
Scan my ticketSources
- UK GDPR Article 15
- Data Protection Act 2018 s.45
- https://www.ico.org.uk/your-data-matters/your-right-to-get-copies-of-your-data