Civil Moving Traffic Offence Enforcement Privacy Notice
Our core data protection obligations and commitments are set out in Bradford Council's primary privacy notice.
This notice provides additional privacy information forindividuals whose personal data is processed as part of the Council’s Civil Moving Traffic Offence Enforcement functions. It describes how the Planning, Transportation and Highways Service collects, uses and shares personal information about you, and the types of personal information we need to process.
Who we are
City of Bradford Metropolitan District Council (CBMDC) is the data controller for your personal data processed as part of Civil Moving Traffic Offence Enforcement. CBMDC is registered as a data controller with the Information Commissioner’s Office.
What personal data we collect
Vehicle data
- Vehicle registration number (VRN)
- Make
- Model
- Colour
- DVLA keeper details
Contravention data
- Date
- Time
- Location
- Contravention code
- Photographic evidence
- Civil enforcement officer observations
Enforcement data
- Penalty charge notice (PCN) number
- Payment status
- Representations and appeals
- Debt recovery correspondence
Correspondence data
- Name
- Address
- Telephone number of registered keeper or their representative
Why we process your data
We process personal data for the following purposes:
- Issuing, progressing and enforcing penalty charge notices under the Traffic Management Act 2004.
- Determining appropriate enforcement action.
- Supporting road safety objectives under the Council’s Vision Zero Bradford programme, including identification of vehicles that may be uninsured, without a valid MOT, or using cloned registration plates
- Reducing the cost of futile enforcement action against persistent evaders
- Statistical analysis and research to improve enforcement effectiveness (using anonymised and aggregated data only)
- Sharing intelligence with West Yorkshire Police where there is a lawful basis relating to the prevention or detection of crime
Our lawful basis for processing
Article 6(1)(e): Public task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Council. The relevant legislation includes the Traffic Management Act 2004, the Road Traffic Regulation Act 1984, and the Civil Enforcement of Road Traffic Contraventions (General Provisions) (England) Regulations 2022.
Article 6(1)(c): Legal obligation: where processing is necessary to comply with the Council’s statutory duties relating to network management and civil enforcement.
The Council does not rely on consent as the lawful basis for processing personal data in connection with Civil Moving Traffic Offence Enforcement. Where processing involves Criminal Offence Data (as defined by the Data Protection Act 2018, section 11(2)), the Council processes this under Schedule 1, Part 2, Paragraph 6 (statutory and government purposes) of the DPA 2018.
Who we share your data with
We may share your personal data with the following organisations where it is necessary, lawful and proportionate to do so:
| Recipient | Purpose |
|---|---|
| Driver and Vehicle Licensing Agency (DVLA) | Obtaining registered keeper details for the purpose of issuing penalty charge notices. |
| West Yorkshire Police | Sharing intelligence on vehicles identified as potentially uninsured, unregistered, or using cloned plates, for the purposes of crime prevention and road safety (Operation Steerside). |
| Debt recovery agents | Where PCNs remain unpaid following all statutory processes, for the purpose of recovering the debt. |
| Traffic Penalty Tribunal | Where a motorist appeals a penalty charge notice. |
| Back-office system provider | Processing enforcement casework on the Council’s behalf (data processor, subject to a Data Processing Agreement). |
How long we keep your data
| Data type | Retention period |
|---|---|
| PCN casework records | Vehicles subject to enforcement action will have their records retained for a period of up to 60 days unless required for ongoing enforcement or legal proceedings. |
| CCTV and photographic evidence | Vehicles subject to enforcement action will have their records retained for a period of up to 60 days unless required for ongoing enforcement or legal proceedings. |
| Correspondence | Vehicles subject to enforcement action will have their records retained for a period of up to 60 days unless required for ongoing enforcement or legal proceedings. |
How we protect your data
We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. These include:
- Access to enforcement systems is restricted to authorised officers with role-based permissions
- Data is transmitted via our own data network, encrypted SFTP and SSL/TLS HTTPS connections
We also have procedures in place to deal with any suspected data security incidents, and we will notify you and the appropriate regulator of any incident where we are legally required to do so.
When your data is sent to other countries
We do not send any information we collect about you outside the United Kingdom.
Rights for individuals under the UK GDPR
What are your rights?
Please contact the Corporate Information Governance Team at dpo@bradford.gov.uk to exercise any of your rights, or if you have a complaint about why your information has been collected, how it has been used or how long we have kept it for.
You can contact our Data Protection Officer at dpo@bradford.gov.uk or write to: Data Protection Officer, City Hall, Centenary Square, Bradford, BD1 1HY.
Complaints about how the Council has handled personal data are considered under the Council’s complaints policy, section 17: Data Protection complaints in line with the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, ICO guidance and any statutory complaint handling requirements that apply.