Suspect Tesco effectively outsourced the car park monitoring to a third-party. The third-party uses a particular ANPR system at their discretion to collect data and supplies Tesco with a branded parking validation app. So there probably is room to debate whether the ANPR data security was ultimately the responsibility of Tesco or remained with the third-party.
Biting the hand that feeds IT
