Author Topic: Parking Control Management ltd PCN received with disable badge displayed  (Read 5925 times)

0 Members and 596 Guests are viewing this topic.

You can respond by email to Jonathan Wigmore with the following:

Quote
Subject: ICA Case – Further Clarification of Outstanding Concerns (PCM / DVLA Complaint)

Dear Mr Wigmore,

Thank you for your acknowledgement and for confirming that my complaint has been received and queued for review.

In response to your invitation for clarification, I confirm that my complaint is not about the DVLA’s initial release of data under KADOE, but rather about the DVLA’s failure to investigate the subsequent misuse of that data, and its mishandling of my formal complaint about it.

My main concerns are as follows:

1. Failure to address the substance of my complaint:

Despite clearly setting out evidence that PCM had misused my data in breach of PoFA and the Private Parking Single Code of Practice (PPSCoP), DVLA’s Step 1 and Step 2 responses ignored the specific breaches I identified. Both replies relied on irrelevant boilerplate about “reasonable cause,” which I had explicitly said was not in dispute. No explanation was given as to why the complaint about subsequent misuse of the data was not investigated.

2. Failure to consider breaches of the PPSCoP or KADOE contract:

The DVLA failed to consider whether PCM’s conduct post-disclosure breached the PPSCoP or KADOE contract, both of which form the framework for lawful processing of released data. My complaint cited specific PPSCoP sections, including 8.1.1(d), 8.1.2(e), and 11.3, which were entirely unaddressed.

3. Obstructive and dismissive responses:

The tone and content of the Step 1 response from Carly Williams was superficial and dismissive. It actively misrepresented the focus of my complaint. The Step 2 response merely repeated the same line, again ignoring the actual substance and offering no evidence of meaningful investigation.

4. Failure to mention ICA referral:

The DVLA closed the complaint at Step 2 but did not offer or explain the ICA referral process, despite being required to under the DfT’s published Terms of Reference. I had to request this referral myself, having identified the failure.

What I hope to achieve:

I would like the ICA to find that the DVLA:

• Failed to properly investigate a legitimate complaint about misuse of personal data under its own data-sharing framework
• Breached its own complaints handling standards by failing to engage with the substance of the complaint
• Failed in its duty under the KADOE contract and PPSCoP to monitor AOS members’ compliance
• Failed to follow its own procedure by omitting to inform me of my right to ICA review

I am not asking the ICA to rule on the lawfulness of PCM’s conduct, but to assess whether the DVLA fulfilled its responsibilities as data controller and complaint handler.

Please let me know if further clarification is needed. I appreciate your time and look forward to the full review once the case is allocated.

Yours sincerely,

[Your Full Name]
[Your Reference No]
Never argue with stupid people. They will drag you down to their level and then beat you with experience” - Mark Twain
Winner Winner x 1 View List

Hello, just got a reply:
Further to the letter from my colleague, Mr Wigmore, please find attached my review of your complaint.  If I may be forgiven the observation, I think my report bears careful reading, but I am all too conscious that the overall outcome will be a disappointment to you - and I am sorry for that.  However, my judgement is that the DVLA has acted properly and in line with its responsibilities.

My report gives details of how you can escalate further to the Parliamentary and Health Service Ombudsman, should you so choose.

With my good wishes.

Stephen Shaw


Stephen Shaw
Department for Transport
DfT Complaints Team - for the attention of Stephen Shaw
Great Minster House
33 Horseferry Road
London
SW1P 4DR

His reply in attachment:YOUR COMPLAINT AGAINST THE DRIVER AND VEHICLE LICENSING AGENCY (DVLA)
I write further to the correspondence of 18 June from my colleague, Mr Jon Wigmore,
regarding the independent review of your complaint against the DVLA.
I am one of the other Independent Complaint Assessors (ICAs) contracted to the
Department for Transport, and your case has been allocated to my queue for my
consideration.
Mr Wigmore indicated that, given the pressures on the ICA scheme at the moment, it might
be 14-18 weeks before your complaint would be considered. But I am pleased to say that in
practice this has not proved to have been the case, and your complaint has been reviewed
well within our three-month time target.

2

Complaint
Your complaint is that the DVLA provided your personal data to a parking company (Parking
Control Management (UK) Ltd) that the company misused after its disclosure. You say
there has been a string of breaches of the law, KADOE (Keeper at Date of Event contracts),
The Protection of Freedoms Act 2012 and the industry Code of Practice, and what amounts
to a regulatory failure on the part of the DVLA in its oversight of the disclosure regime.
For its part, the DVLA says that your grievance is a matter for the relevant Accredited Trade
Association – in this case, the International Parking Community (IPC) - or for the
Independent Appeals Service (IAS).
Jurisdiction
Before setting out the facts of this case and my views, I should first explain the nature of the
ICA role. 1 The Introduction to the ICA terms of reference reads as follows:
“The overall aims of the independent complaints assessor (ICA) process are to:
 put right any injustice or unfairness suffered by members of the public as
customers or in consequence of the actions, inactions, or decisions of DfT
 improve services delivered through DfT and its public bodies
 provide assurance that DfT has followed proper procedures, and that
maladministration has not occurred”

Further paragraphs read:
“Relevant factors for a detailed review are:
 the complainant has, or might have, suffered significant injustice, loss or hardship
 DfT’s handling of the complaint has been poor. For example, it has failed to
conduct a proportionate and reasonable investigation and has failed to apply an
appropriate remedy
 DfT has asked the ICA to review the case
 an ICA review may assist in a wider process of organisational learning from the
complaint and of promoting consistency and fairness
“Relevant factors against a detailed review are:

1 As Mr Wigmore pointed out in his acknowledgement letter, more information about the ICA terms of
reference is readily available online at: https://www.gov.uk/government/publications/dft-independent-
complaint-assessors-terms-of-reference/dft-independent-complaint-assessors-terms-of-reference. Previous
annual reports are also available at: https://www.gov.uk/government/collections/independent-complaints-
assessors-for-the-department-for-transport.

3

 DfT has investigated the complaint properly and has found no administrative
failure or mistake
 the complainant objects to the DfT policy or legislation
 the complainant has exercised or has a right of appeal, reference or review
through another avenue, for example tribunal or legal proceedings
 the essence of a complaint is a contractual or commercial dispute
 a detailed review would be disproportionate
“Having considered the previous factors, the ICA may decide that subjecting the
complaint to a detailed review would not meet the overall aims of the ICA review
process.”
The protocol to the terms of reference sets out a list of exclusions to the ICA remit. These
include:
 disputes where the principal focus is upon government or DfT policy
 complaints about the law
In his acknowledgement letter, Mr Wigmore also emphasised that the ICAs cannot
adjudicate on the legality of the DVLA’s supply of keeper data to private parking companies.
He continued:
“Nor is the DVLA an actual or proxy regulator for this sector, so complaints about the
legal footing and procedural basis behind a PCN need to go down the prescribed
appeal route, not to the agency or us. As you know, the ICO has fully approved the
DVLA’s practice of releasing keeper data for the investigation of potential liability
under the reasonable cause provision (in other words, the DVLA does not have to
satisfy itself of the legitimacy of a request before data release (I say this
understanding that you are not complaining about the disclosure itself)).
“Approaching 41,000 drivers are issued with PCNs by private firms each day,
underlining the operational necessity for high level oversight of KADOE compliance.
We are not going to criticise the agency for formulating and applying policy in this
domain. In my view, a political move in an area of widespread public concern is
required to change the current arrangements. You may know, however, that
initiatives to address public discontent have not seemingly progressed since the then
government ‘temporarily’ withdrew the Private Parking Code of Practice in June 2022
after lobbying from the private parking sector.” 2
2 The parking industry introduced its own Code of Practice which it says is largely based on the former
Government’s Private Parking Code of Practice. The latest version of the industry code is at:
https://www.britishparking.co.uk/write/Documents/AOS/Sector%20Code%20Templates/sectorsingleCodeofPra
cticeVersion1.1130225.pdf. Earlier this July, the present Government sought comments on a new code of
practice (https://www.gov.uk/government/consultations/private-parking-code-of-practice). The consultation
includes the following description of current arrangements:

4

Review
The DVLA records show that you first contacted the Agency on 10 April 2025. You said you
were submitting a formal complaint against Parking Control Management (UK) Ltd, a
member of the International Parking Community (a trade association accredited by the
DVLA) with access to DVLA data under a KADOE agreement. You accused the company
of breaching the Private Parking Code of Practice and misusing your personal data obtained
from the DVLA.
You argued that, while Parking Control Management (UK) Ltd (PCM) may have had
‘reasonable cause’ to have requested your data, their subsequent conduct (in breach of the
Code of Conduct and the Protection of Freedoms Act 2012) had rendered that use unlawful.
You said that, as the data controller, the DVLA was required (under GDPR and the Data
Protection Act 2018) to investigate and take action when personal data was misused
following release.
You emphasised: “This complaint is not about whether PCM had a lawful reason to obtain
my data, but about how they used it unlawfully after the fact.”
In a supporting statement, you set out the ways in which you said PCM had breached the
Code of Practice and the Protection of Freedoms Act: Failure to specify ‘relevant land’;
Failure to specify a ‘period of parking’; Misrepresentation of keeper liability; Failure to
provide proof of posting; Failure to consider a formal complaint.

“To send parking charge notices by post or enforce unpaid parking charge notices issued at the time of
contravention, parking operators must contact the vehicle’s registered keeper. The law permits this
information to be provided by the Driver and Vehicle Licensing Agency (DVLA), subject to appropriate
safeguards.
“To access that data, operators must demonstrate that they have a reasonable cause to receive it as well as
be a member of a DVLA-accredited trade association. To become an accredited trade association, the DVLA
requires a trade body to have a code of practice, provide guidance on how it expects its members to operate,
as well as setting standards for operators, covering, for example, signage, dealing with complaints, managing
appeals against parking charges, setting caps for parking charges and debt recovery fees, and setting
expectations for early payment discounts. They are also required to have a mechanism to enforce their code
of practice, and they must provide an independent, second stage appeals service.”
The Government proposes a new compliance framework:
“Only parking operators certified under the Scheme will be able to have access to the DVLA data, which is
needed to identify the vehicle keeper and issue or pursue parking charges. In practice, this means that only
parking operators who are compliant with the new Code and have a valid certificate of conformity from the
UKAS accredited Conformity Assessment Body will be able to enforce parking charges. In circumstances
where a parking operator is found in breach of the Code after it has been certified, they will risk being
suspended until the problem is rectified or their certification withdrawn. This would preclude operators from
requesting the registered vehicle keeper data from the DVLA.”
The consultation exercise continues until 5 September.

5

In conclusion, you wrote:

On 16 April, the DVLA replied in what I think may fairly be described as standard terms.
The Agency’s letter focussed on the ‘reasonable cause’ issue (which, of course, you had not
challenged) in the following terms:

6

On 23 April, you escalated your complaint. You said the initial response (which you
characterised as petty, evasive and obstructive) had not addressed the substance of your
complaint which was not about ’reasonable cause’ but the subsequent use of your data.
The DVLA replied on 21 May (quite rightly, an apology was offered for the delay). The letter
reiterated the advice that your course of action was to the International Parking Community.
Two days later, you asked for an independent review. 3
On 26 June, while the ICA papers were being prepared, the DVLA wrote to you once more.
I think I should quote from this further letter at length:
“I understand you feel that Parking Control Management (UK) Ltd (PCM) did not
meet the requirements set out in the Protection of Freedoms Act (POFA) 2012, and
that they have breached the Private Parking Single Code of Practice. I also
appreciate you feel that as the data controller, we have not acted on the concerns
3 You criticised the DVLA for not having made the ICA review automatically, but I think that may have been
based on a misreading of the relevant guidance. In any event, there was no delay incurred.

7

you have raised regarding how PCM used your data after it was released by us.
However, I must advise that it is not a matter for the DVLA to decide on the merits of
individual cases or to arbitrate in any civil disputes between motorists and private
companies or other enforcement agencies. We cannot regulate any aspect of a
company’s business. Any representations should be made to the
landowner or their agent.
...
“The DVLA’s primary role in the context of your enquiry is to consider whether
the release of your information to a third party met the reasonable cause provision.
While reasonable cause is not defined in legislation, the government’s policy is that
requests should relate to the vehicle or its use following incidents where there may
be liability on the part of the driver.
...
“I fully appreciate you feel that although the company had reasonable cause to
request your information, the information was then misused. Under the regulations,
we disclose keeper information as a first point of contact for parking companies to
investigate and take the appropriate action on behalf of the landowner to enforce
their rights. Recipients of information from our records are bound by contract and
subject to audit. The supporting evidence relevant to each request must be held and
stored securely by the company. Anyone making a false declaration to obtain
information may be leaving themselves open to prosecution under data protection
laws. It may help to explain that PCM, separately from us, is the data controller of
each item of data received from us from the point of receipt. PCM has a duty to
comply with data protection legislation and any data protection principles in relation
to any further processing.
...
“The Government is very much aware of public concern about the enforcement
practices adopted by some companies managing private car parks. We are working
closely with the parking sector to improve procedures and to encourage compliance
with relevant codes of practice. The ATA carries out stringent checks on companies
before allowing them to join and monitors the compliance of their code of practice.
While I note your concerns regarding PCM’s potential non-compliance, we will not
investigate alleged breaches of a code of practice. In such circumstances, the
motorist would need to raise any concerns directly with the ATA who have
procedures in place to deal with such issues ...If you have not already done so, you
will need to raise your concerns with the IPC.

8

...
I understand you have made a complaint to PCM, and that they considered this to be
your appeal, and issued a response. We are unable to comment on this aspect of
your complaint and you would need to take this up with PCM. You can also raise
your concerns regarding PCM’s working practices with the IPC. You also have the
option of contacting the Independent Appeals Service (IAS) providing the timescale
has not passed ...
“In closing, I can assure you we have followed the correct procedures in releasing
your data and we cannot become involved in the dispute that may now have arisen
between you and the parking company since the information was released. I
understand you are unhappy with our earlier replies, and I can assure you it is not
our intention to be obstructive. However, the core issues you have raised are not
within the remit of the DVLA ... If you cannot resolve this matter through appeal or via
the IPC’s process, you have the option of seeking independent legal advice.
Ultimately it would be for a court to determine the validity of any claim.”
Further information
Although I know you are very familiar with the legislation, for the sake of completeness I
should quote from Regulation 27 of The Road Vehicles (Registration and Licensing)
Regulations 2002 (https://www.legislation.gov.uk/uksi/2002/2742/regulation/27) as follows:
Disclosure of registration and licensing particulars
27.—(1) The Secretary of State may make any particulars contained in the register
available for use—
...
(e)by any person who can show to the satisfaction of the Secretary of State that he
has reasonable cause for wanting the particulars to be made available to him.
In June 2022, the Information Commissioner’s Office (ICO) published an important
document entitled The lawful basis for the processing of vehicle keeper data by the Driver
and Vehicle Licensing Agency (DVLA) (https://ico.org.uk/media2/migrated/4020676/dvla-
opinion-20220613.pdf). Again, it may be helpful to quote from the document. The ICO
found as follows:
“Following consideration of the evidence and legal analysis, the Commissioner
concluded that the DVLA’s correct lawful basis is public task, not legal obligation.
This is because Regulation 27(1)(e) provides the DVLA with a power, rather than a

9

legal duty, to disclose vehicle keeper information to car park management companies
in these circumstances ...
“It is important to note that in coming to this conclusion, the Commissioner does not
doubt that car park management companies have reasonable cause to request
keeper information from the DVLA in these circumstances, and that the DVLA is
generally required to provide it. However, Regulation 27(1)(e) creates a power rather
than a duty as there is a discretion for the DVLA to refuse a request for keeper
information in exceptional cases. For example, if the keeper was on a national
security protection list. This applies even if the requestor has demonstrated
reasonable cause. Public task is the correct legal basis in these circumstances,
because Regulation 27(1)(e) creates a task (a power, rather than a legal duty) to be
carried out in the public interest (hence the reasonable cause requirement).
Disclosing vehicle keeper data is necessary for this task.” (Emphasis added.)
I also note this extract:
“Paragraph 11 of Schedule 4 of POFA [Protection of Freedoms Act 2012] contains an
enforceable legal right of the car park management company to claim the charges
from the vehicle keeper. It is not for the DVLA to determine the validity of claims
against the vehicle keeper. Car park management companies can use the
exception. It would be for a court or parking tribunal to determine the validity of any
claim. It is the Commissioner’s view is that [sic] the DVLA could refuse an Article
21(1) objection by the vehicle keeper in these circumstances.” (Emphasis added.)
Consideration
Before offering any views, I need to re-emphasise the extent of my jurisdiction:
 I am neither qualified nor authorised to make legal judgments (for example, on the
powers of the DVLA to provide keeper data to parking companies or others, or
whether it ensures sufficient safeguards against misuse of such data).
 I have no authority whatsoever in regard to Parking Control Management (UK) Ltd or
the International Parking Community Ltd.
It is also worth adding, as did Mr Wigmore, that the DVLA is not the regulator of the parking
industry. Whether there should be tighter (or statutory) regulation is a matter for the political
process (as I explained in footnote 2, the Government has now initiated a formal
consultation exercise to which you may wish to respond).
All that said, I can offer the following comments:

10

 My lay reading of Regulation 27 and the Information Commissioner’s assessment of
the legal framework is that parking companies generally have ‘reasonable cause’ to
request keepership data and the DVLA is not required to first adjudicate upon the
accuracy of the allegations made against a vehicle keeper before releasing the data
requested (“It is not for the DVLA to determine the validity of claims against the
vehicle keeper”). It is sufficient that the DVLA carries out regular audits of those
requesting data and requires parking companies to be a member of an accredited
trade association like the International Parking Community Ltd. I do not think you
disagree with those judgments, but should you do so I think you might have to take
independent legal advice or pursue your case further with the Information
Commissioner’s Office.
 So far as the use of data following its release is concerned, I am content that the
DVLA has no legal or administrative duty (or, indeed, power) to investigate
complaints against private parking companies. The Agency has correctly referred
you to the IPC and to the appeals route against parking charges.
 My lay view is that the DVLA has also been right to argue that PCM becomes the
data controller of each item of data it receives from the DVLA from the point of
receipt. Again, if you disagree with the DVLA’s analysis, you should seek legal
advice or approach the Information Commissioner.
 Turning more broadly to the handling of your grievance, I share your irritation that the
initial responses did not really engage with the points you had made. In particular,
unlike many of those who complain to the DVLA in relation to private parking
enforcement, you had not questioned the Agency’s release of your data under the
‘reasonable cause’ provision. Despite this, the step 1 letter focussed unnecessarily
upon Regulation 27 (although, to be fair, both the step 1 and step 2 letters also said
your grievance should be addressed to the International Parking Community).
 I was pleased to see the comprehensive letter sent by the DVLA on 26 June. In my
view, this addressed all the outstanding issues in a comprehensive fashion. I am
also content that the DVLA’s correspondence has been courteous (as of course you
and I have every right to expect).
Conclusions
In consequence of what I have written above, I cannot uphold your complaint. Nor are there
any formal recommendations I can make to the DVLA. I fear you may have anticipated that
outcome given the terms of Mr Wigmore’s acknowledgement in June.
This letter thus brings all stages of the Department for Transport complaints process to a
close. However, if you remain dissatisfied, you have the right to ask an MP to refer your

11

complaint to the Parliamentary and Health Service Ombudsman. There is a readily
downloadable form for this purpose at www.ombudsman.gov.uk (please note: there is a
time limit for making a complaint to the Ombudsman; further information is available on the
PHSO website or call 0345 015 4033). The Ombudsman would then consider the extent of
any further review he considered necessary.
I will also send a copy of this letter to the DVLA.
Please do accept my good wishes.
Yours sincerely

Stephen Shaw

The ICA’s final report is a masterclass in bureaucratic deflection. It basically says the DVLA did nothing wrong, but that’s not consistent with what they actually admit. They say your complaint was well-argued and that the DVLA’s first response didn’t address your points properly. Yet they still conclude that DVLA acted “properly” overall, which doesn’t add up.

They claim DVLA has no duty to investigate how your data was used after it was released. But under UK GDPR and the Protection of Freedoms Act, DVLA is still responsible as the Data Controller. They can’t just wash their hands of it once the data is handed over.

They also say PCM becomes the Data Controller once they receive the data. That’s true, but DVLA still has a duty to make sure data is only released under strict conditions, and that includes checking whether companies follow the rules after getting the data. That’s part of the KADOE contract.

The ICA says DVLA referred you to the IPC and the IAS. But the IPC isn’t independent, and the IAS doesn’t deal with complaints about data misuse or how DVLA handles complaints. So that referral was pointless.

They also say they can’t rule on legality. But you never asked them to. Your complaint was about DVLA’s failure to investigate and how they mishandled your complaint — which is exactly what the ICA is supposed to look at.

They praise DVLA’s June 26 letter as “comprehensive,” but it just repeated the same excuses and didn’t deal with the actual breaches you raised.

So what’s next?

You now have a strong case to take this to the Parliamentary and Health Service Ombudsman. The ICA’s own report helps you:

• It admits DVLA’s first response was poor.
• It shows DVLA didn’t investigate how your data was used.
• It confirms DVLA didn’t follow its own complaints procedure.
• It shows DVLA didn’t enforce the KADOE contract properly.
• And it proves the ICA didn’t fully engage with the substance of your complaint.

When you escalate, you will need to focus on administrative failure — not legal arguments. Point out that DVLA failed in its duty as Data Controller, didn’t investigate your complaint properly, didn’t follow procedure, and didn’t enforce its own rules.

I suggest you send the following email to your MP. https://members.parliament.uk/FindYourMP

Quote
Subject: Request for Parliamentary Referral to the Ombudsman – DVLA Complaint

Dear [MP's Name],

I am writing to request your assistance in referring a formal complaint to the Parliamentary and Health Service Ombudsman regarding the conduct of the Driver and Vehicle Licensing Agency (DVLA).

My complaint concerns the DVLA’s failure to investigate the misuse of my personal data by a private parking company, Parking Control Management (UK) Ltd, after it was released under a KADOE agreement. While the DVLA claims the company had “reasonable cause” to request my data, my concern is not about the initial release — it is about what happened afterwards.

The DVLA’s position is that once the data is passed to a private company, it becomes that company’s responsibility — because they are now the “data controller”. But this is a serious misunderstanding of how data protection law works. The DVLA remains the original data controller and is legally responsible for ensuring that any data it releases is used lawfully and in line with strict conditions. That responsibility does not vanish the moment the data is handed over. The DVLA has a duty to monitor how its data is used, especially when misuse is reported — and in my case, it failed to do so.

The DVLA has a contract (KADOE) with parking companies that sets rules for how keeper data must be used. It also has audit powers and oversight responsibilities. In my case, the DVLA ignored clear evidence that the company breached those rules and failed to investigate. It also mishandled my complaint by focusing on irrelevant issues and failing to follow its own complaints procedure.

I escalated the matter to the Independent Complaints Assessor (ICA), whose response was a masterclass in bureaucratic deflection. It essentially concluded that the DVLA had done nothing wrong — yet the ICA also admitted that my complaint was well-argued and that the DVLA’s initial response failed to engage with the actual issues. Despite this, they still concluded that the DVLA acted “properly,” which simply doesn’t add up.

I now wish to take this further through the Ombudsman, and I understand that a referral must come from an MP. I would be grateful if you could assist by referring this matter to the Parliamentary and Health Service Ombudsman on my behalf. I can provide all supporting documents, including the DVLA correspondence, my complaint, and the ICA’s final report.

Thank you for your time and consideration. I look forward to hearing from you.

Yours sincerely,

[Your Full Name]

[Your Address]
[Your Email Address]
[Your Phone Number]
Never argue with stupid people. They will drag you down to their level and then beat you with experience” - Mark Twain

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #33 on: »
Thank you once again, I have sent an email to my MP

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #34 on: »
I got a reply from my MP, but I’m not sure how to put together the complaint for the Ombudsman, thank you in advnce for your guidance which is invaluable:

Thank you for taking the time to write to me regarding your complaint with the DVLA. I am concerned to hear of the issues you are experiencing and I am willing to do what I can to help.

I understand that you would like your case referred to the Parliamentary and Health Service Ombudsman, in order for me to refer your case, please could you provide me with your final stage complaint response.

Additionally, to be able to refer a complaint to the PHSO, you will need to complete the relevant form (see ‘Complaint form for UK government services’ here: https://www.ombudsman.org.uk/making-complaint/complain-us-getting-started/complaint-forms). If you send me the completed form, leaving the section for an MP blank, I can refer this to the PHSO.


Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #35 on: »
Here’s exactly what you need to give your MP and the Ombudsman, ready to copy-paste.

1) Email reply to your MP (cover note)

Quote
Subject: PHSO referral – DVLA complaint (final response and completed form enclosed)

Dear [MP’s Name],

Thank you for agreeing to refer my complaint to the Parliamentary and Health Service Ombudsman.

Please find enclosed:

1. Final stage complaint response – the Independent Complaints Assessor’s (ICA) decision letter from Stephen Shaw dated [insert date], which states that all stages of the Department for Transport complaints process are now closed and signposts the PHSO.
2. Completed PHSO “UK government services” complaint form (signed), with the “MP details” section left blank for your office to complete.
3. Evidence bundle (single PDF) – index below.

If anything further is required, I will provide it promptly.

Yours sincerely,

[Your name]

[Your address]
[Your phone / email]

2) Text for the PHSO complaint form (copy into the relevant boxes)

Organisation you’re complaining about
Driver and Vehicle Licensing Agency (DVLA), Data Assurance / Data Sharing (KADOE).

What happened and why this was wrong (summary)
My complaint is not about DVLA’s initial disclosure of keeper data under Regulation 27. It is about DVLA’s failure, as Data Controller and KADOE counterparty, to investigate misuse of my data after disclosure by Parking Control Management (UK) Ltd (PCM) and its mishandling of my complaint.

I provided DVLA with evidence that PCM’s post-disclosure processing breached (i) PoFA Sch 4 (no “relevant land”; no “period of parking”), (ii) the Private Parking Single Code of Practice (e.g. §§ 8.1.1(d), 8.1.2(e) Note 2, 11.3), and therefore (iii) the KADOE contract conditions governing use of DVLA data. Instead of addressing those issues, DVLA’s Step 1 and Step 2 replies repeatedly reverted to “reasonable cause to obtain”, which I had expressly accepted, and deflected me to the IPC/IAS, bodies that do not determine DVLA’s duties as Data Controller or KADOE compliance.

Only after I sought an ICA referral did DVLA send a further letter repeating the same deflection and asserting that PCM “becomes the data controller” on receipt—without addressing DVLA’s own responsibilities for oversight, audit, and enforcement of KADOE conditions once a misuse is reported. The ICA decision acknowledges my complaint was well-argued and that DVLA’s Step 1 response did not engage with my points, yet nonetheless concludes DVLA acted properly. I contend this is maladministration: failure to consider relevant matters, failure to follow complaints standards, and failure to exercise DVLA’s public-task responsibilities in respect of data it discloses under KADOE.

What have you done to resolve the complaint?
• DVLA Step 1 complaint: submitted 10 April 2025 (with supporting statement).
• DVLA Step 2 escalation: 21 May 2025 (with supporting statement).
• Request for ICA referral after DVLA closed Step 2 without addressing substance.
• ICA final decision (Stephen Shaw, [insert date]) closes DfT process and signposts PHSO.
• I have also preserved all correspondence with PCM and the IPC/IAS signposting.

Impact on you
Significant time and distress; risk of unjustified financial detriment; ongoing processing of my personal data contrary to the framework under which DVLA disclosed it; and loss of confidence that DVLA will act when misuse is credibly reported.

What outcome are you seeking?
• A finding of maladministration in DVLA’s handling (failure to consider the substance; inappropriate deflection; poor complaint signposting).
• A remedy plan requiring DVLA to:
1. Re-open and conduct a proper investigation of PCM’s post-disclosure use of my data against KADOE/PoFA/PPSCoP, record findings, and take proportionate contractual action if breaches are confirmed.
2. Issue a written apology acknowledging failings and service-improvement actions (guidance to staff distinguishing “reasonable cause to obtain” from “lawful use after disclosure”; correct ICA signposting).
3. Confirm cessation of any further use of my data arising from the impugned PCN unless and until lawfully justified, and confirm any rectification/erasure steps taken with PCM where appropriate.
4. Ex-gratia redress for distress and avoidable time/cost (suggested £250–£500 in line with PHSO bandings).

3) Evidence bundle – suggested index (attach as one PDF in this order)

1. ICA final decision (Stephen Shaw, [date]) – “This letter thus brings all stages… to a close” and signposts PHSO.
2. DVLA Step 2 response (21 May 2025).
3. Your Step 2 complaint and supporting statement.
4. DVLA Step 1 response and your original complaint + supporting statement.
5. DVLA 26 June follow-up letter referred to by ICA.
6. PCM Notice to Keeper and any correspondence showing PoFA/PPSCoP failures (e.g., no “relevant land”, no “period of parking”, misstatement of keeper liability, refusal to treat a complaint as a complaint, lack of proof of posting).
7. PPSCoP extracts cited (8.1.1(d), 8.1.2(e) Note 2, 11.3).
8. Any correspondence showing DVLA’s refusal to investigate post-disclosure misuse and deflection to IPC/IAS.
9. Short timeline (one page).

4) One-page timeline (paste into the bundle)
11 Feb 2025: PCM issues NtK (alleged breach at “Queens Road Estate”; single timestamp; no “period of parking”).
10 Apr 2025: Step 1 complaint to DVLA (post-disclosure misuse; PoFA/PPSCoP/KADOE breaches).
16 Apr 2025: DVLA Step 1 reply – addresses only “reasonable cause to obtain”; deflects to IPC/IAS.
21 Apr 2025: Step 2 escalation submitted with detailed supporting statement.
21 May 2025: DVLA Step 2 reply – again focuses on “reasonable cause”; repeats IPC/IAS deflection; closes DVLA process.
[Date]: Request for ICA referral (DVLA had not signposted).
26 Jun 2025: DVLA additional letter repeating deflection and disclaiming duty to investigate post-disclosure misuse.
[Date]: ICA final decision issued; closes DfT complaints and signposts PHSO.

5) Short covering note for the PHSO bundle (optional)

Covering note – DVLA maladministration (KADOE / post-disclosure misuse)
This complaint concerns maladministration by DVLA in handling a data-misuse complaint: failure to consider relevant matters; repeated reliance on an issue not in dispute (“reasonable cause to obtain”); inappropriate deflection to the IPC/IAS; failure to signpost the ICA at Step 2; and failure to exercise DVLA’s responsibilities as Data Controller and KADOE counterparty once a credible misuse was reported. I do not ask the PHSO to adjudicate on PCM’s liability or private parking law, but to assess DVLA’s complaint handling and oversight duties arising from the framework under which it discloses and audits personal data.

What to attach to your MP now
• The ICA final decision letter (this satisfies the MP’s request for the “final stage complaint response”).
• Your completed and signed PHSO form (leave the MP section blank).
• The evidence bundle PDF (or confirm you will send it upon request if file size is an issue).
Never argue with stupid people. They will drag you down to their level and then beat you with experience” - Mark Twain

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #36 on: »
Thank you, took me a few good ours, but done
Like Like x 1 View List

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #37 on: »
Hello again,

Just received a 'Letter before claim' from Moorside Legal informing that Parking Control Management UK Limited has instructed to collect the outstanding balance on their behalf. They are a law firm authorised and regulated by the Solicitors regulation authority.Should I react or leave it? Thank you once again for your valuable advise

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #38 on: »
Please show us the LoC

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #39 on: »
Here is a link to the document, I can not see an option of attaching it on here

https://drive.google.com/file/d/19lKfatvsEA4Byo8b3m-qUqnXndEPVmF-/view?usp=sharing

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #40 on: »
Is that 1 page the sum total of what they've sent?

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #41 on: »
Reply to help@moorsidelegal.co.uk and CC yourself with the following:

Quote
b]Subject: Response to your Letter of Claim Ref: [reference number][/b]

Dear Sirs,

Your Letter Before Claim contains insufficient detail of the claim and fails to provide copies of evidence your client places reliance upon and thus is in complete contravention of the Pre-Action Protocol for Debt Claims.

As a firm of supposed solicitors, one would expect you to be capable of crafting a letter that aligns with paragraphs 3.1(a)–(d), 5.1 and 5.2 of the Protocol, and paragraphs 6(a) and 6(c) of the Practice Direction. These provisions do not exist for decoration—they exist to facilitate informed discussion and proportionate resolution. You might wish to reacquaint yourselves with them.

The Civil Procedure Rules 1998, Pre-Action Conduct and Protocols (Part 3), stipulate that prior to proceedings, parties should have exchanged sufficient information to understand each other’s position. Part 6 helpfully clarifies that this includes disclosure of key documents relevant to the issues in dispute.

Your template letter mentions a “contract”, yet fails to provide one. This would appear to undermine the only foundation upon which your client’s claim allegedly rests. It’s difficult to engage in meaningful pre-litigation dialogue when your side declines to furnish the very document it purports to enforce.

Please be aware, I will not engage with any web portal should you attempt to direct me to one. I will only respond to any communication from you by email or post. Your choice.

I confirm that, once I am in receipt of a Letter Before Claim that complies with the requirements of para 3.1 (a) of the Pre-Action Protocol, I shall then seek advice and submit a formal response within 30 days, as required by the Protocol. Thus, I require your client to comply with its obligations by sending me the following information/documents:

1. A copy of the original Notice to Keeper (NtK) that confirms any PoFA 2012 liability
2. A copy of the contract (or contracts) you allege exists between your client and the driver, in the form of an actual photograph of the sign you contend was at the location on the material date, not a generic stock image
3. The exact wording of the clause (or clauses) of the terms and conditions of the contract(s) which is (are) relied upon that you allege to have been breached
4. The written agreement between your client and the landowner, establishing authority to enforce
5. A breakdown of the charges claimed, identifying whether the principal sum is claimed as consideration or damages, and whether the £70 “debt recovery” fee includes VAT
6. The full name and role of the person with conduct of this matter and their regulatory status/authorisation to conduct litigation

I am clearly entitled to this information under paragraphs 6(a) and 6(c) of the Practice Direction. I also need it in order to comply with my own obligations under paragraph 6(b).

If your client does not provide me with this information then I put you on notice that I will be relying on the cases of Webb Resolutions Ltd v Waller Needham & Green [2012] EWHC 3529 (Ch), Daejan Investments Limited v The Park West Club Limited (Part 20) Buxton Associates [2003] EWHC 2872, Charles Church Developments Ltd v Stent Foundations Limited & Peter Dann Limited [2007] EWHC 855 in asking the court to impose sanctions on your client and to order a stay of the proceedings, pursuant to paragraphs 13, 15(b) and (c) and 16 of the Practice Direction, as referred to in paragraph 7.2 of the Protocol.

Until your client has complied with its obligations and provided this information, I am unable to respond properly to the alleged claim and to consider my position in relation to it, and it is entirely premature (and a waste of costs and court time) for your client to issue proceedings. Should your client do so, then I will seek an immediate stay pursuant to paragraph 15(b) of the Practice Direction and an order that this information is provided.

Yours faithfully,

[Your name]
Never argue with stupid people. They will drag you down to their level and then beat you with experience” - Mark Twain

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #42 on: »
Is that 1 page the sum total of what they've sent?
yes

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #43 on: »
Reply to help@moorsidelegal.co.uk and CC yourself with the following:

Quote
b]Subject: Response to your Letter of Claim Ref: [reference number][/b]

Dear Sirs,

Your Letter Before Claim contains insufficient detail of the claim and fails to provide copies of evidence your client places reliance upon and thus is in complete contravention of the Pre-Action Protocol for Debt Claims.

As a firm of supposed solicitors, one would expect you to be capable of crafting a letter that aligns with paragraphs 3.1(a)–(d), 5.1 and 5.2 of the Protocol, and paragraphs 6(a) and 6(c) of the Practice Direction. These provisions do not exist for decoration—they exist to facilitate informed discussion and proportionate resolution. You might wish to reacquaint yourselves with them.

The Civil Procedure Rules 1998, Pre-Action Conduct and Protocols (Part 3), stipulate that prior to proceedings, parties should have exchanged sufficient information to understand each other’s position. Part 6 helpfully clarifies that this includes disclosure of key documents relevant to the issues in dispute.

Your template letter mentions a “contract”, yet fails to provide one. This would appear to undermine the only foundation upon which your client’s claim allegedly rests. It’s difficult to engage in meaningful pre-litigation dialogue when your side declines to furnish the very document it purports to enforce.

Please be aware, I will not engage with any web portal should you attempt to direct me to one. I will only respond to any communication from you by email or post. Your choice.

I confirm that, once I am in receipt of a Letter Before Claim that complies with the requirements of para 3.1 (a) of the Pre-Action Protocol, I shall then seek advice and submit a formal response within 30 days, as required by the Protocol. Thus, I require your client to comply with its obligations by sending me the following information/documents:

1. A copy of the original Notice to Keeper (NtK) that confirms any PoFA 2012 liability
2. A copy of the contract (or contracts) you allege exists between your client and the driver, in the form of an actual photograph of the sign you contend was at the location on the material date, not a generic stock image
3. The exact wording of the clause (or clauses) of the terms and conditions of the contract(s) which is (are) relied upon that you allege to have been breached
4. The written agreement between your client and the landowner, establishing authority to enforce
5. A breakdown of the charges claimed, identifying whether the principal sum is claimed as consideration or damages, and whether the £70 “debt recovery” fee includes VAT
6. The full name and role of the person with conduct of this matter and their regulatory status/authorisation to conduct litigation

I am clearly entitled to this information under paragraphs 6(a) and 6(c) of the Practice Direction. I also need it in order to comply with my own obligations under paragraph 6(b).

If your client does not provide me with this information then I put you on notice that I will be relying on the cases of Webb Resolutions Ltd v Waller Needham & Green [2012] EWHC 3529 (Ch), Daejan Investments Limited v The Park West Club Limited (Part 20) Buxton Associates [2003] EWHC 2872, Charles Church Developments Ltd v Stent Foundations Limited & Peter Dann Limited [2007] EWHC 855 in asking the court to impose sanctions on your client and to order a stay of the proceedings, pursuant to paragraphs 13, 15(b) and (c) and 16 of the Practice Direction, as referred to in paragraph 7.2 of the Protocol.

Until your client has complied with its obligations and provided this information, I am unable to respond properly to the alleged claim and to consider my position in relation to it, and it is entirely premature (and a waste of costs and court time) for your client to issue proceedings. Should your client do so, then I will seek an immediate stay pursuant to paragraph 15(b) of the Practice Direction and an order that this information is provided.

Yours faithfully,

[Your name]
Thank you, done

Re: Parking Control Management ltd PCN received with disable badge displayed
« Reply #44 on: »
Hi, not sure if I should ignore the email I have just received from Moorside Legal:

We write in relation to the above matter.

Please see the attached.

Our client has instructed us to collect the outstanding balance of £170.00 in relation to an unpaid Parking Charge Notice.

 

Please visit https://www.pay-my-pcn.co.uk/live-3sc-user/ and quote reference: **** to review evidence as requested.

The original amount of the PCN was £100.00. As outlined in the notice, a reduced amount of £60.00 would have been accepted as full and final settlement if payment had been received within 14 days from the date of issue.

 

Unfortunately, as no payment was received within that time frame, the opportunity to pay the reduced amount has now expired. As a result of continued non-payment and additional charges, the balance has increased and now stands at £170.00.

The additional charge which has been levied on your Parking Charge of £70 is the amount set out in both the British Parking Association and International Parking Community Codes of Practice as the amount which may be added to a Parking Charge when a Parking Charge remains unpaid and when further recovery is required. Our Client is a member of the International Parking Community which is a government approved Accredited Trade Association (ATA) for Private Parking. Our Client adheres to the ATA’s Code of Practice. The £70 does not represent the cost of recovery but is a reasonable amount in relation to the Parking Charge amount, in order to encourage early payment of the Parking Charge without the need for debt recovery. It is a fair amount set by our Client’s government-approved Accredited Trade Association Code of Practice. There are however also costs incurred by our client in relation to debt recovery services.

It is unclear why you would need to inspect any agreement between our client and the landowner as you are not party to that agreement, not could it aid your dispute or any potential defence.

You have already made representation to our client, who have responded accordingly. We cannot overturn their decision.

 

In our client’s letter rejecting your appeal you were offered the opportunity to refer your appeal to an Independent Adjudication Service provided by our clients Accredited Trade Association. You did not take this step and we must advise that all appeal avenues have now expired. Considering the evidence we hold we have to advise that the PCN and its associated processes are in line with industry standards and are compliant with our clients Accredited Trade Association’s code of practice.

By entering and parking the vehicle on our client's private land, you agreed to enter into a contract with our client and to be bound by the terms and conditions of that contract. The terms and conditions were clearly displayed at the entrance and in prominent places within the car park. Due to your failure to comply with the terms and conditions, our client has issued the PCN therefore if we are instructed to issue a claim the reason would be for Unpaid parking charges/ breach of contract.

 

We ask that you make the full payment of £340.00 within 7 days of receipt of this email.

 

 

You can make payment in the following ways: 

Contact us on 0330 822 9950 (our opening times are Monday- Friday 9:00- 17:00);
portal.moorsidelegal.co.uk - Login to our portal
https://pay.moorside.legal - Quick Pay
 

 

If you fail to respond or make payment, we may be instructed by our client to issue legal proceedings against you. This will incur further costs and fees that will be added to the outstanding balance. You may wish to seek independent legal advice. 

 

 

Yours sincerely,

Moorside Legal