I was recently a passenger in a car which overstayed in a supermarket car park. I was distressed to find out that it was not just the car registration number that was photographed but the front of the car showing the driver and passenger. The image was then sent to a third party the registered keeper – is this not an invasion of privacy and against the ICO data protection act.
Arguably it is an invasion of ones privacy. I can imagine a number of situations where a 3rd party could find out where someone has been or been with. Unfortunately, from a legal standpoint I don’t think they are breaking any laws. The use of CCTV and ANPR is not strongly regulated. There’s a piece on the subject by Liberty which you might find of interest.
Best of luck with the ticket