This blog post details a scam run by UKCPS whereby they send out parking charge notices even though the motorist has paid the correct amount.
If the victim is suckered by the scam, UKCPS end up £60-£100 richer. If the victim fights back, UKCPS cancel the charge.
Anyone taken in by this scam can write to UKCPS asking for their money back. If UKCPS refuse, then the victim can send a letter before claim, and then file a claim in the small claim courts. This can be done up to 6 years after the payment.
As this appears to be a scam, then UKCPS had no right to demand keeper data from the DVLA in the first place. UKCPS can ask for keeper data from the DVLA but only when a charge has legitimately been incurred. If they are making up charges, or if they are issuing charges because their systems are being run incompetently then they have no rights to ask for your data. In those cases, then UKCPS will likely have misused your personal data to issue the parking charge.
The recent court case of Vidal-Hall v Google Inc  EWHC 13 (QB) established that misuse of personal data is a tort and damages might not be limited to costs incurred.
A claim of say, £250 for misuse of personal data would cost £25 to file, and would have to be filed within 6 years of the date the data was last misused.
The Parking Prankster