If anyone has had a PRIVATE parking notice in the post or a letter in the post from a large firm like ParkingEye then the address will have come from the DVLA via the electronic service provide under the KADOE contract.
The Information Commissioner is now carrying out a formal investigation into the DVLA releasing keeper details which are personal data in breach of DPA 1988/2018 and GDPR.
The reason for the investigation is that the DVLA does not inspect
any of the requests for "reasonable cause" for wanting the data.
See Reg. 27(1)(e)
http://www.legislation.gov.uk/uksi/2002/2742/regulation/27/madeDisclosure of registration and licensing particulars
27.—(1) The Secretary of State may make any particulars contained in the register available for use—(a)by a local authority for any purpose connected with the investigation of an offence or of a decriminalised parking contravention;
(b)by a chief officer of police;
(c)by a member of the Police Service of Northern Ireland;
(d)by an officer of Customs and Excise in Northern Ireland; or
(e)by any person who can show to the satisfaction of the Secretary of State that he has reasonable cause for wanting the particulars to be made available to him.Paper requests (made on from V/888 are always checked).
If the ICO decides this is unlawful then the DVLA is facing millions of damages claims which could run into many millions of pounds.
If you know anyone who has had a letter or private PCN, please complain to the ICO:
Email: casework@ico.org.uk
that your data was released without the due cause test.