LGOIMA Request Details

I refer to your Local Government Official Information and Meetings Act (LGOIMA) request dated 22 May 2025, and our follow-up conversation, in which you requested information related to the implementation and operation of Licence Plate Recognition (ANPR) technology for the enforcement of new parking time limits in Feilding. 

Please find the responses to your queries below. 

1. Privacy Impact Assessment (PIA) 

A Privacy Analysis was completed on 11 October 2024 for the implementation of Orikan's parking monitoring and enforcement system. This analysis concluded that a full Privacy Impact Assessment was not required, as the system collects minimal personal information and risks were assessed as moderate and mitigated. 

Key points: 

• Information collected includes licence plate numbers, car make and model. 

• Photos of vehicles are taken as evidence; any individuals incidentally captured have their faces automatically blurred. 

• The data is not considered sensitive, and no major privacy concerns were identified. 

• Storage is handled in Microsoft Azure data centres in Australia, and the data is not shared for marketing or research purposes. 

• Orikan, the technology provider, is in the process of obtaining ISO 27001 certification for Azure, after previously being certified for AWS. 

A copy of the Privacy Analysis document is available via this link - MDC_Privacy_Analysis_-_Orikan_-_parking_monitoring_and_enforcement.zip. 
The link will expire after 7 days so remember to save any documents you wish to have continued access to.  We recommend that this link is opened on a PC.

Noting: A Privacy Officer has oversight of these matters. 

2. Operational Details of the Mobile Enforcement Vehicle 

Is the vehicle used an MDC fleet vehicle? 

Yes, the vehicle used for ANPR parking enforcement is part of the Manawatū District Council (MDC) fleet. 

Is the vehicle manned by MDC staff? 

Yes, the vehicle is operated by MDC compliance staff trained in the use of Orikan's parking compliance system. 

3. Data Processing and Management 

Does the footage go elsewhere to be analysed or is this done in-house? 

The system analyses the photos and flags up any "overstays". MDC Officers review the photos to determine compliance and then issue infringements accordingly. 

How long is footage held? 

Orikan's system allows configuration of retention periods, with a typical maximum of up to 7 years, though MDC retains it for operational use only as long as necessary.  

Where is footage held? 

Footage and data are temporarily stored in Microsoft Azure, hosted in Australia. 

Who has access to the footage? 

Access is limited to authorised MDC personnel involved in compliance operations. Data access is governed by MDC's internal security protocols. 

4. Infringement Generation 

Where are the analysis and fines generated from? 

Infringements are reviewed and generated by MDC staff.  Orikan's system captures and stores relevant evidence, but the actual infringement notices are issued either at the time via a portable printer or printed and mailed out. The infringement is then loaded onto MDC's internal Enterprise Resource Planning (ERP) system for follow up.