So only the DVLA have replied so far.
"Dear xxx
Thank you for your correspondence of about the release of information from the Driver and Vehicle Licensing Agency’s (DVLA) vehicle register. I have been asked to formally review your case at Step 1 of our complaints procedure.
The DVLA takes the protection and security of its data very seriously and has procedures in place to ensure data is disclosed only where it is lawful and fair to do so and where the provisions of the Data Protection Law are met. The Agency must strike a balance between ensuring the privacy of motorists is respected while enabling those who may have suffered loss or damage to seek redress.
I have investigated the matter with UK Car Park Management Ltd who made the request to the DVLA for the registered keeper details for vehicle registration number (VRN) xxx. UK Car Park Management Ltd have confirmed that a Parking Charge Notice (PCN) was issued to you for breaching the terms and conditions at Haydon Way, London. UK Car Park Management Ltd have further confirmed that following their investigations they can confirm the PCN was issued in error. They have explained that as part of their internal controls on 27th October 2025 they were able to establish that a portion of the roadway at Haydon Way, London had been adopted, but unfortunately due to human error amendments were not made to their enforcement boundaries until 17th December 2025. UK Car Park Management Ltd have assurred me that the matter has been addressed with the individual concerned and a full review of the PCN’s issued within the incorrect time period has been undertaken. They have further confirmed that the PCN issued to you has been cancelled and you have been notified of this on 31st December 2025.
I would like to make it clear that while the DVLA uses an electronic line to provide registered keeper details, we do not use automated decision making. There is no requirement for a decision to be made to disclose information at the time an application is made. The request is received and processed in accordance with the terms and condition of the contractual agreement between the DVLA and the parking company. The evidence relevant to each request must be held by the company and made available to the DVLA upon request. This process is strictly audited and where any inappropriate use of DVLA data by a company is identified, swift and proportionate action is taken.
The DVLA requires private car parking operators to be members of a relevant ATA before providing vehicle keeper information. ATA membership helps to ensure parking companies operate within a code of practice and it is clearly in everyone’s interest for the ATAs to make sure that its members comply with the code. But we know that operators do make errors, some of which represent shortfalls in compliance with their code of practice. The DVLA takes such matters seriously and looks primarily to the ATA’s to monitor adherence to the code of practice and explore and address non-compliance when it arises.
The company in question, UK Car Park Management Ltd is a member of the International Parking Community Ltd (IPC) which is an Accredited Trade Association for the parking industry. The IPC’s code of practice is published on its website at
www.theipc.info under the heading Accredited Operators Scheme. If a member of this AOS does not comply with the code of practice, it may be suspended or expelled, during which time no data will be provided to it by the DVLA. If you feel that any of the practices used by the company do not comply with the IPC’s code of practice you may wish to contact the IPC via their website or by writing to IPC, at PO Box 662 SK10 9NR.
We have fully considered all the information available. If you feel that your complaint has not been resolved, you can request escalation of your complaint to Step 2 of the complaints process. Further options about our complaint procedure can be found online at
www.gov.uk/dvla/complaints"
I haven't received any notification that the PCN has been cancelled yet, unless its in the post, but it is shown as cancelled on the website.
The bit about the adopted road suggests to me that the council adopted the road back on 27th October 2025 (which I think is unlikely, as I suspect that the road was adopted years ago given its location). That still sounds like CPM have accessed the data unlawfully. Can someone confirm if I'm correct in my understanding?
I'm heading out in a bit and will see if they've changed the signage there.
Once again, thank you for all of your help