Comment Blatantly Illegal Under GDPR (Score 2) 677
If this were an online activity, it would be blatantly illegal under the GDPR, because it: 1) Collects permanent, personal identifying data (license plate number) 2) Does not allow the user to opt out 3) Is not relevant to providing the user with a service (shopping) 4) Retains the data indefinitely.
Should they be allowed to do this just because it is private property? Websites are privately owned too, but they are required to comply with GDPR.