Parking control

Municipality of Veenendaal

A scanning car equipped with camera performs parking control using an image recognition algorithm.

Last change on 22nd of May 2025, at 14:37 (CET) | Publication Standard 1.0

• Publication category: Impactful algorithms
• Impact assessment: DPIA
• Status: In use

General information

Theme

Traffic

Begin date

2022-10

Contact information

[e-mail]

Responsible use

Goal and impact

The purpose of the scan car is to check parked vehicles in areas where paid parking applies or a parking permit is required. By deploying the scan car, more cars can be checked efficiently. Citizens encounter it when they park their vehicles in the zones where the scan car operates. Using a camera, the scan car captures license plates, which are then verified by an algorithm.

Considerations

A key benefit of deploying the scan car and its algorithm is efficiency; fewer enforcers are needed to carry out checks. In addition, the system contributes to fairness, as the algorithm records and processes all license plates indiscriminately. A drawback is that the algorithm lacks full context. For example, the camera cannot read disabled parking cards, which means that vehicles with disabled parking cards are wrongly flagged lasher they are in violation. For this reason, there is always human intervention always. An enforcer checks the situation and draws up a fine if necessary.

Human intervention

An enforcer always checks whether what the algorithm indicates matches reality. If it does, the enforcer writes a parking fine if necessary.

Risk management

1. Unauthorised access to data

• Sensitive information can fall into the wrong hands. This can happen through unauthorised persons gaining access to the system, hacking, intrusion or other forms of misuse. This can lead to identity fraud, disclosure of criminal offences or unwanted traceability of data subjects.
• To minimise this risk, the number of personal data stored is limited as much as possible. In addition, strict security measures are applied, such as personnel management (only authorised persons have access), data access policies, data encryption and network security. Role-Based Access Control (RBAC) is also applied, so that employees can only access the data they need for their work. Physical access control and hardware security prevent unauthorised access to systems.

2. Unwanted modification of data

• Unjustified decisions or additional charges can be imposed due to human error, manipulation or software problems. If data is processed incorrectly, this can lead to unjustified fines or incorrect parking enforcement.
• To prevent errors, operational security is applied, with processes and controls in place to monitor data changes. The RBAC methodology ensures that only authorised staff can make changes. In addition, software is regularly tested and updated to correct errors and prevent manipulation.

3. Data disappearing

• If data is lost or stolen, it can lead to failed enforcement and possible legal complications. This can happen due to technical failures, deliberate manipulation, theft or hacks.
• Backups and measures to prevent data loss are ensured. The amount of personal data stored is kept to a minimum. Network and hardware security ensure that data is not easily lost. In addition, encryption is applied to keep data secure, and RBAC is deployed to restrict unauthorised access to the system.

Legal basis

The legal basis for the use of the algorithm is further laid down in sections 225, 234 and 235 of the Municipalities Act, as well as in the Municipal Parking Taxes Decree. These articles regulate the power of municipalities to levy and enforce parking taxes. Section 225 of the Municipalities Act deals with the levying of parking taxes Section 234 and 235 deal with their post-levy and collection. The Municipal Parking Taxes Decree provides further guidelines on how these taxes should be applied. This legal basis gives the municipality of Veenendaal the authority to carry out parking enforcement and determine violations using technology such as the scan car and algorithm.

In addition, the conditions for data processing are described in a processing agreement between the parties involved. This document ensures that the processing of personal data complies with legal requirements and that the rights of data subjects remain protected. The lawfulness of the processing aligns with Article 6.1(e) of the AVG: "Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller."

This means that the system is used to support decentralised authorities in their enforcement tasks. The primary purpose of the processor's processing is to assist municipalities in complying with and enforcing parking rules in public spaces, as required by their legal obligations.

Impact assessment

Data Protection Impact Assessment (DPIA)

Operations

Data

The algorithm uses various personal data collected through ANPR cameras on the scanning car and through linked systems. This data relates to both offenders and non-offenders, as well as enforcement personnel such as special investigating officers and parking managers.

To check parking rights, data processed include license plates, location data, traffic data and imagery such as photos and videos. This data is automatically scanned and linked to a geographical position. A check then takes place based on a municipal map of parking zones and a link to the National Parking Register.

If necessary, additional personal data are accessed, such as the license plate holder's name, date of birth, place of birth, address, contact information, gender and financial transaction data. Sensitive data such as the citizen service number may also be involved in this process, provided it is necessary and within the legal framework. For enforcement personnel, the data processed include IP address, login data and device data for access and system management purposes.

The processing of this data serves a public purpose, namely the enforcement of parking rules as laid down in municipal regulations. Data processing takes place on the basis of the General Data Protection Regulation, with the performance of a task of public interest as the basis.

Technical design

The scan car drives through streets on public roads in areas where parking is only allowed with a valid parking ticket or permit. During these trips, different types of cameras on the scan car, such as infrared cameras, colour cameras and panoramic cameras, automatically scan the license plates of all parked cars in the enforcement area. An exact geographical position is then linked to each scanned license plate.

This data is securely transmitted to Brickyard's back office. There, an algorithm checks whether the geographical position of the license plate is within a parking area recorded on a map provided by the municipality. This map contains all relevant information about the parking zones. After this check, the system filters the data and consults the parking entitlements in the National Parking Register.

If it is found that no valid parking entitlements have been registered for the relevant license plate, a parking controller is sent to the car to assess the situation on the spot. If there are no special circumstances, the enforcer confirms the violation, after which an additional parking tax assessment, popularly known as a fine, is sent to the owner of the vehicle.

External provider

Brickyard