Do not simplify your first suggested appeal. Your draft reply to NCP is excellent. It's well-structured, assertive, and legally accurate, especially in highlighting the failure to comply with Paragraph 9(5) of Schedule 4 of PoFA 2012.
Also, NCP are one of the few firms that are likely to cancel at first appeal.
They have indeed unlawfully processed your Keeper data obtained from the DVLA and it also warrants a DVLA complaint because they have breached the PPSCoP section 8.1.1(d) which, in turn is a breach of their KADOE contract with the DVLA.
Section 8.1.1(d) states:
The parking operator must not serve a notice which in its design and/or language: state the keeper is liable under the Protection of Freedoms Act 2012 where they cannot be held liable.
Here’s how to make a DVLA complaint:
• Go to: https://contact.dvla.gov.uk/complaints
• Select: “Making a complaint or compliment about the Vehicles service you have received”
• Enter your personal details, contact details, and vehicle details
• Use the text box to summarise your complaint or insert a covering note
• You will then be able to upload a file (up to 19.5 MB) — this can be your full complaint or supporting evidence
That’s it.
The DVLA is required to record, investigate and respond to every complaint about a private parking company. If everyone who encounters a breach took the time to submit a complaint, we might finally see the DVLA take meaningful action—whether that means curtailing or removing KADOE access altogether.
For the text part of the complaint the webform could use the following:
I am submitting a formal complaint against National Car Parks Limited (NCP), a BPA AOS member with DVLA KADOE access, for breaching the Private Parking Single Code of Practice (PPSCoP) after obtaining my personal data.
While NCP may have had reasonable cause at the time of their KADOE request, their subsequent misuse of my data—through conduct that contravenes the PPSCoP—renders that use unlawful. The PPSCoP forms an integral part of the DVLA’s governance framework for data access by private parking firms. Continued access is conditional on compliance.
I have prepared a supporting statement detailing the breach and NCP’s actions. Please investigate and confirm a complaint reference.
Then you could upload the following as a PDF file for the formal complaint itself:
SUPPORTING STATEMENT
Complaint to DVLA – Breach of KADOE Contract and PPSCoP
Operator name: National Car Parks Limited (NCP)
Date of PCN issue: 15 May 2025
Vehicle registration: [INSERT VRM]
I am reporting a misuse of my personal data by NCP, who obtained my keeper details from the DVLA under the KADOE contract.
Although they may have had reasonable cause to request my data initially, their use of it became unlawful because they acted in breach of the Private Parking Single Code of Practice (PPSCoP). The PPSCoP is a mandatory requirement for DVLA data access.
The KADOE contract makes clear that keeper data may only be used to pursue a parking charge in line with the Code of Practice. NCP issued a Notice to Keeper dated 15 May 2025 for an alleged incident on 2 May 2025. By law (PoFA 2012, Schedule 4), the notice must be delivered within 14 days to hold the keeper liable. This was not just missed but never achievable.
Despite this, NCP’s letter falsely claims a right to recover the charge from me as keeper and threatens court and debt recovery action. This is a misrepresentation of legal position and unlawful processing of personal data for a purpose they knew was no longer permitted.
These are not minor breaches. They demonstrate a clear failure to act in accordance with the KADOE contract and PPSCoP.
The DVLA remains the Data Controller and must ensure personal data is not misused. I request a full investigation and enforcement action as appropriate.
This may include:
• Confirming that a breach has occurred
• Taking enforcement action against the operator
•Suspending or terminating their KADOE access if warranted
I have attached relevant supporting material with this statement. Please confirm receipt and provide a reference for this complaint. I am also happy to provide further information if required.
Name: [INSERT YOUR NAME]
Date: [INSERT DATE]