{
  "record": {
    "id": "f358bd2cd376db05",
    "code": "PAI-F358BD2C",
    "force": "Home Office",
    "country": "United Kingdom",
    "country_code": "uk",
    "is_country": true,
    "region": "United Kingdom",
    "technology": "ANPR (Automatic Number Plate Recognition)",
    "technology_slug": "anpr",
    "vendor": "Leonardo MW Ltd (software) and Redcentric plc (data storage), named as processors in the impact assessment",
    "vendor_slug": "",
    "programme": "National ANPR Service",
    "status": "operational",
    "stage": "in-use",
    "evidence": "official",
    "evidence_is_claim": false,
    "since": "2006",
    "legal_basis": "Part 3 of the Data Protection Act 2018 (law enforcement purposes); common law; Part 2 of the Protection of Freedoms Act 2012 and the Surveillance Camera Code of Practice; national ANPR standards (as stated in the impact assessment and the standards)",
    "oversight": "NPCC ANPR lead as lead controller, a national auditor and an Independent Advisory Group; the ICO regulates. The impact assessment says the Independent Advisory Group has been chaired by the Surveillance Camera Commissioner and that a replacement chair is being arranged, because the Biometrics and Surveillance Camera Commissioner's office is to be disbanded on implementation of the Data Protection and Digital Information (No 2) Bill, as the assessment puts it.",
    "notes": "The National ANPR Service's data protection impact assessment (version 4, January 2025, page updated 29 July 2026) states that there are 12,076 camera sets and 1,878 mobile ANPR cameras nationally. It gives three inconsistent daily volumes in different sections: over 100 million, can exceed 90 million, and in excess of 80 million reads per day. It says data in national systems is retained for 12 months, that local systems hold data for a maximum of 90 days, and that the 12-month period requires further consideration to demonstrate compliance with the storage limitation principle. The national ANPR standards (version 3.5, July 2026) add that mobile reads must be transferred to the national service within 48 hours and that vehicle of interest lists must be deleted no later than 56 days after their last review. A force may connect to the national service only after approval by the NPCC policing lead for ANPR.\n\nRecorded as one body for the national service, under the name Home Office, which publishes the national ANPR standards on behalf of the joint controllers. The impact assessment says the system is run by police forces and other law enforcement agencies as joint controllers, with the NPCC ANPR lead as lead controller; the Home Office is a joint controller because of Border Force's operational use, supports the other controllers on policy, and handles ANPR procurement and the management of processors. The processors it names are Leonardo MW Ltd (software) and Redcentric plc (data storage). Use by individual forces should be added force by force as sources confirm it.",
    "source": "Home Office, National ANPR Service DPIA (v4, January 2025) and National ANPR standards (v3.5, July 2026)",
    "source_url": "https://gov.uk/government/publications/national-anpr-service-data-protection-impact-assessment/national-anpr-service-data-protection-impact-assessment-accessible",
    "last_checked": "2026-11-04",
    "record_url": "https://www.policeainews.com/tracker/record/f358bd2cd376db05"
  },
  "licence": "https://www.policeainews.com/data#licence"
}