Nov '25 • Parking Parasites
a response to DCA
Hello everybody, mi first post here, I received a letter from DCA (see attached image) and came up with a response using the Private Parking Parasites Equitable Challenge Chatbot.
I'd really appreciate if you could have a look at it and let me know whether there is anything that should be added, or anything in need of changing or perhaps removing, this is my first time so I'm not sure If I'm perhaps not overcomplicating it unnecessarily.
I understand that I should put the registered mail reference number at the top of the document. Can I send both letters in one envelope using the same reference number for both?
I also have one practical question, do I keep the original signed by me document for my own records and only send them the photocopy of it? Or do I send them the original and keep photocopy myself?
This is the result:
EQUIPARK LEGAL SERIES
Subject Access Request & Notice of Equitable Objection (SAR 1)
Issued under Articles 15, 18 & 21 UK GDPR, the Data Protection Act 2018 (ss. 45–47), and the Equitable Jurisdiction of the Courts of England & Wales
To: [Insert Organisation Name & Address]From: [Your Full Name]Address: [Your Full Postal Address]Date: [Insert Date]Reference: [Their Reference Number / Claim Number]
1 Preliminary Enquiry on Capacity and Title
1.1 Before addressing data-protection matters, confirm whether you have purchased the alleged debt outright and pursue it in your own name (having acquired the chose in action), or whether you merely purchased access to my personal data to act as an agent or third-party intermediary.
1.2 If you are acting only as an intermediary, you hold no lawful standing to process my data or to demand payment.
2 Identification and Verification
2.1 For identification under Article 12(6) UK GDPR, I enclose:
- Your internal reference number(s), and
- A redacted utility / telephone bill showing my name and address.
2.2 Under Articles 5(1)(a) and 5(1)(c) UK GDPR (lawfulness & data minimisation), you have no right to demand a photographic ID, which would constitute excessive processing.
3 Statutory Subject Access Request
3.1 Pursuant to Articles 15, 18 and 21 UK GDPR and ss. 45–47 Data Protection Act 2018, provide within one calendar month:
- All personal data held or processed about me, including correspondence, emails, ANPR images, OCR logs, audit trails, and any third-party disclosures.
- Copies of your Data Protection Impact Assessment (DPIA) and Legitimate Interest Assessment (LIA) relied upon for processing.
- Full DVLA KADOE access record and justification under POFA 2012 Schedule 4.
- Complete Landowner Authority or Contract Chain proving capacity to offer parking contracts and to enforce in your own name.
- Copy of the alleged contract or parking agreement said to bind me.
- Full record of any data-sharing with solicitors, debt collectors, or credit agencies.
4 Verification of Contractual Legitimacy
4.1 Under Articles 5(1)(a) and (d) UK GDPR (lawfulness and accuracy), state what steps were taken to verify that any contract relied upon was lawfully formed and binding.
4.2 Provide a true copy of that contract and any evidence identifying the contracting party.Absent such proof, continued processing of my data is unlawful.
5 County Court Judgment and Regulatory Compliance
5.1 If your organisation has obtained or claimed a County Court Judgment (CCJ) against me, disclose:
- The claim number, court, date, and claimant name;
- Proof of service of claim form;
- Explanation of how you verified lawful title to sue; and
- Your FCA authorisation number permitting debt-collection or enforcement under the Financial Services and Markets Act 2000.
5.2 Processing or publishing inaccurate judgment data constitutes breach of Articles 5 and 6 UK GDPR and ss. 168–170 DPA 2018.
6 Deed of Assignment and Lawful Basis
6.1 Under s. 136 Law of Property Act 1925, any assignment of debt must be by Deed of Assignment.Under Articles 5(1)(a) and 15 UK GDPR, you are obliged to disclose that deed as proof of lawful basis to process my data.
6.2 State your Article 6(1) lawful basis for processing.If relying on legitimate interest [6(1)(f)], provide your LIA balancing test.If relying on POFA 2012, show full Schedule 4 compliance (timings, creditor identification, parking period, driver liability).
7 Accountability and Certification
7.1 All responses must be:
- Written in clear English;
- Signed by a responsible officer stating full name, title, and position; and
- Certified as true, complete, and accurate.
8 Notice of Non-Compliance and Remedy
8.1 Failure to respond fully within one calendar month will amount to breach of the UK GDPR and DPA 2018, giving rise to complaint to the ICO and FCA, and potential civil action under Article 82 UK GDPR and ss. 167–170 DPA 2018.
Let Right Be Done.
(Signed) ______________________________[Your Full Name]
EQUIPARK LEGAL SERIES
Data Accuracy Challenge & Notice of Dispute
Issued under Articles 5, 6, 16 & 18 UK GDPR and the Data Protection Act 2018
To: [Insert Organisation Name & Address]From: [Your Full Name]Address: [Your Full Postal Address]Date: [Insert Date]Reference: [Their Reference Number / Claim Number]
1 Purpose and Immediate Effect
1.1 This notice is a formal challenge to the accuracy and lawfulness of all personal data you process concerning the alleged “debt” above.1.2 It places your organisation under an immediate Restriction of Processing pursuant to Article 18 UK GDPR, effective upon receipt.
2 Accuracy Challenge
2.1 Under Articles 5(1)(d) and 16 UK GDPR, I dispute:
- The existence, amount, and validity of the alleged debt;
- The authenticity or enforceability of any purported contract; and
- The accuracy of any claim that a County Court Judgment exists.
2.2 Until verified, you must suspend all reliance on such data and provide:
- Documentary proof of contract or agreement;
- Landowner authority or Deed of Assignment conferring title; and
- Full disclosure of data sources and sharing recipients.
3 Verification of County Court Judgment
3.1 If you allege that a CCJ exists, you must provide:
- The claim number, court, and date of judgment;
- The claimant’s identity and proof of title;
- Evidence that I was properly served; and
- The lawful basis for retaining or publishing the data.
3.2 Absent proof, all references to such judgment must be rectified or erased.
4 Restriction of Processing (Article 18 UK GDPR)
You are hereby restricted from:
- Undertaking or instructing enforcement or collection actions;
- Sharing or publishing my data with third parties, including CRAs or solicitors;
- Adding interest or charges; and
- Automated decision-making or profiling relating to this matter.
This restriction remains until you prove accuracy and lawfulness or a court orders otherwise.
5 Lawful Basis and Authority
5.1 Identify the Article 6(1) lawful basis for processing.5.2 If relying on legitimate interest, provide the LIA and DPIA.5.3 If claiming to own the debt, provide the Deed of Assignment (s. 136 Law of Property Act 1925).5.4 If acting as an agent, identify the principal creditor and provide evidence of mandate.
6 Regulatory Accountability
6.1 State your Financial Conduct Authority authorisation number and permissions held.6.2 Under Article 5(2) UK GDPR, your response must be signed by a responsible officer, with full name and position, certifying accuracy.
7 Non-Compliance and Consequences
Failure to comply will amount to ongoing breach of the UK GDPR and DPA 2018 and may result in:
- Complaint to the Information Commissioner’s Office and FCA;
- Civil claim for damages, injunction, and erasure under Article 82 UK GDPR and ss. 167–170 DPA 2018.
All rights reserved in equity and law.
Let Right Be Done.
(Signed) ______________________________[Your Full Name]
Thank you in advance for all feedback :)
4
12 comments
a response to DCA
Leaderboard (30-day)
1
+227
2
+196
3
+166
4
+109
5
+100
Powered by