UK Airport Parking Compliance: The Rules Meet-and-Greet Operators Actually Have to Meet

Compliance is the part of a meet-and-greet operation that gets attention only when something has already gone wrong — a lost airport access agreement, a customer complaint escalated to an accreditation body, or an ICO enquiry about the photos on a driver's personal phone.

This guide covers the four areas that actually generate problems for UK airport parking operators, and what a defensible operation looks like in each. It is written for operators, not lawyers: the aim is to help you work out what to check, not to substitute for advice on your specific circumstances.

1. Accreditation schemes: what they are and why they matter commercially

Two names come up repeatedly in UK airport parking. The British Parking Association (BPA) operates industry schemes covering parking operations, including accreditation aimed specifically at meet-and-greet operators, alongside the well-known Park Mark Safer Parking award for parking facilities. The Independent Airport Parking Association (IAPA) is a trade body for independent airport parking operators that sets quality standards for its members.

Accreditation is rarely a legal requirement in itself. Its importance is commercial, and it works through three channels:

• Aggregator access. Booking channels increasingly ask about accreditation when onboarding operators, and it can influence placement and trust badges on listings.
• Airport access agreements. Airports control who may operate on and around their forecourts, and accreditation is one of the signals they weigh.
• Customer trust. After several well-publicised failures in the UK meet-and-greet sector, consumers increasingly look for a recognised badge before handing over their keys.

What schemes generally look for is consistency and evidence — documented processes, staff training records, insurance, secure storage arrangements, and a reliable record of each vehicle's condition at handover. The last of these is where most operators are weakest.

2. Airport access agreements: the requirement that can close you overnight

Every UK airport controls vehicle access to its terminal forecourts and sets its own terms for commercial operators — permits, barrier access accounts, designated drop-off zones, and charges per movement. These agreements are the single biggest operational dependency most meet-and-greet businesses have, and they are the fastest thing to lose.

Common triggers for access problems are avoidable and administrative:

• Drivers using the wrong zone or terminal, repeatedly
• Unregistered vehicles on the barrier account
• Excessive dwell time on the forecourt
• Complaints the operator cannot answer with evidence

The last one matters most and is the one a system can fix. When an airport asks what happened with a specific vehicle on a specific date, an operator who can produce a timestamped record — which driver, which terminal, what time, what condition — is in a completely different position from one reconstructing events from WhatsApp messages.

3. Vehicle condition records: your obligations and your protection

When a customer hands you their car, you take on responsibility for it. In legal terms you are a bailee of the vehicle, which broadly means you are expected to take reasonable care of it and can be liable for loss or damage that occurs through failure to do so. Services must also be performed with reasonable care and skill under the Consumer Rights Act 2015.

The practical consequence is that disputes turn on evidence. If a customer alleges damage occurred in your custody and you have no record of the vehicle's condition when you received it, you are arguing from memory against a photograph. That is a losing position regardless of who is actually right.

A defensible condition record has five properties:

• Complete — all faces of the vehicle plus interior and boot, not a couple of angles
• Mandatory — captured every time, not when staff have a spare minute
• Timestamped and located — provably taken at that handover, not later
• Acknowledged — the customer signs to confirm the record reflects the vehicle
• Retrievable — findable in seconds months later, by registration or date

The same record protects the customer as much as the operator. If damage genuinely does occur in your custody, a good intake record establishes that too, and lets you deal with it honestly and quickly instead of arguing. ParkFast enforces this record as a mandatory step in the handover flow.

4. Data protection: the duty most operators overlook

Vehicle intake photographs, customer names, contact details, flight itineraries and registration numbers are personal data under UK GDPR. Handling them creates real obligations, and this is the area where informal operations are most exposed.

Three specific risks are worth checking today:

Photos on personal devices

If your terminal managers photograph vehicles on their own phones, customer personal data is sitting on devices you do not control, backing up to personal cloud accounts, and leaving the business when the member of staff does. You cannot demonstrate where that data is, cannot reliably delete it on request, and cannot guarantee it is secure. This is the most common and most serious gap in the sector.

Retention without a policy

You need a defensible answer to how long you keep intake photos and customer records, and why. "Forever, on whatever device it landed on" is not one. Retention should be tied to a purpose — typically the window in which a claim could realistically be brought — and applied consistently.

Customer information

Customers should be able to find out what you collect, why, how long you keep it, and who you share it with. If your privacy information does not mention vehicle condition photography, it does not describe what you actually do.

5. Insurance and driver checks

Two further items belong on any compliance review, and both are routinely queried by airports and accreditation schemes:

• Motor trade / road risk cover appropriate to driving customer vehicles, plus cover for vehicles while stored in your yard. Check that your policy actually covers the movements you perform and the number of vehicles you hold at peak.
• Driver licence checks performed at hire and re-checked on a defined cycle, with the results recorded. An operator who cannot show when each driver's licence was last verified has a gap that is easy to close and awkward to explain.

A short self-assessment

Work through these questions honestly. Each "no" is a specific, fixable exposure:

• Can you produce a complete condition record for any booking in the last 12 months, in under a minute?
• Is intake photography impossible to skip, or merely discouraged?
• Are any customer vehicle photos currently on staff personal phones?
• Do you have a written retention period for intake photos?
• Can you show which driver had which vehicle at which time, for any date?
• Are all vehicles on your airport barrier account currently registered and correct?
• When was each driver's licence last checked, and is that recorded?

Most operators fail the first three. They are also the three that a proper digital intake process fixes at the same time — the record becomes complete because the system requires it, the photos leave personal devices because they are captured in-app, and retrieval becomes instant because everything is attached to the booking.

Where to go next

If the self-assessment surfaced gaps, the sequence that usually works is: fix the intake record first, because it is the one that protects you commercially and legally at the same time; then resolve where photographs live; then tidy up access-account administration and driver checks.

For the detail on what a defensible intake record looks like in practice, see vehicle damage protection and condition recording, and our guide to IAPA compliance and digital vehicle intake.

This article is general information for UK airport parking operators and is not legal advice. Accreditation criteria, airport access terms, and regulatory guidance change — verify current requirements with the relevant scheme, your airport, and your own advisers.