CCTV & surveillance cameras
Camera systems we operate
Our CCTV is used to capture and monitor images of events that take place in specific locations in real time. The images may also be recorded on a computer hard drive or magnetic tape depending on the type of camera. Cameras may be focussed on a fixed location, set to scan a particular area, or they can be operated remotely by specially trained operators.
Some TfL employees are issued with body worn CCTV cameras, for example, Revenue Control Inspectors and some station staff on the London Underground network, Bus Station Controllers in bus stations, Revenue Protection Inspectors on buses, Road Traffic Enforcement Officers, Taxi and Private Hire Compliance Officers and Transport Support Enforcement Officers. These devices are able to capture audio recordings as well as images. The cameras are clearly visible and are only switched on in the event of an incident (for example the member of staff being subjected to verbal abuse or threats of violence).
The cameras used to enforce our Road User Charging schemes (the Congestion Charge, Low Emission Zone and Ultra Low Emission Zone) are ANPR cameras which capture number plate data in the form of text rather than images. A still photographic image is also captured and used for evidential purposes if a Penalty Charge Notice (PCN) is issued.
Why we operate cameras
Under data protection legislation, we are only allowed to use personal information if we have a proper reason or 'legal basis' to do so. In the case of surveillance cameras, we operate them to perform tasks in support of our statutory functions - which are to deliver 'safe, integrated, efficient and economic transport facilities and services to, from and within Greater London'.
We operate surveillance cameras for these main purposes:
- Protecting the health and safety of employees, customers and members of the public
- Protecting property and other infrastructure
- The management and investigation of major incidents
- Preventing and detecting crime and antisocial behaviour - including fare evasion
- Realtime traffic monitoring
- Enforcing traffic rules and regulations (eg relating to yellow box junctions, red routes and bus lanes); and our Road User Charging Schemes
- Supporting the efficient management and operation of our road and rail networks
- The exercise or defence of legal claims
We sometimes use stand-alone filming equipment on our road network to create a visual summary of the operational changes we make from time to time.
Examples might include improvements to the layout of road junctions, or cycle lanes or where we amend traffic signal timings. We use these videos both internally and externally to demonstrate how these changes have contributed to the Mayor's Transport Strategy and other initiatives such as the Healthy Streets Approach.
Every effort is made to ensure that the focus of any photographs or videos is the road network itself and not individual pedestrians, vehicles or cyclists. In the event that we inadvertently capture images of individuals - or vehicle number plates - we will use redaction techniques to minimise the extent so that people and cars are recognisable.
If you are concerned about appearing in any video, please speak to a member of the staff at the time to stop filming and delete the footage that includes your image.
We have surveillance cameras in and around the following locations:
- London Underground stations, depots, car parks and trains
- Across London's road and tunnels network for monitoring road traffic and for traffic enforcement (including a number of mobile cameras, which can be deployed at various locations)
- Across London's road network for enforcement of our Road User Charging Schemes
- TfL bus stations
- Santander Cycles docking stations
- Piers operated by London River Services;
- Piers used by Woolwich Ferry services and on the Woolwich ferries
- Victoria Coach Station
- Dial-a-Ride vehicles and depots
- Kings Cross Visitor Centre
- Our office buildings, control centres and other parts of the transport network where it's necessary to restrict public access.
Keeping personal data secure
We take the privacy of our customers and the wider public very seriously and a range of robust policies, processes and technical measures are in place to control and safeguard access to, and use of, personal data associated with our surveillance camera systems.
Our CCTV may be stored on servers hosted within the United Kingdom or the European Economic Area (EEA). Any such storage will be subject to contractual safeguards and carried out in accordance with the requirements of UK and EU privacy legislation.
Sharing personal data
TfL has contracts with a number of third party service providers, which provide maintenance services and ensure the efficient day-to-day operation of our surveillance camera systems. We also use external service providers to download images from bus stations, London Underground stations and car park CCTV cameras when we have a business need to retain them for longer than the default retention period.
On a case by case basis we may use and share CCTV images for research and analysis purposes. For example these may be used to improve the management of health and safety incidents, or travel demand management.
Some of TfL's surveillance camera infrastructure is shared with third parties such as the police and local authorities. In certain agreed circumstances, they may take control of a limited number of cameras and use them for activities such as the prevention and detection of crime and anti social behaviour, policing major events and crowd control. These arrangements are covered by information sharing agreements and TfL is not responsible for the camera when it is in the control of the third party.
Under a separate arrangement, we also share the ANPR cameras we use to enforce our Road User Charging schemes with the Metropolitan Police Service, who receive a direct feed of data for the purpose of preventing and detecting crime and for safeguarding national security. Find out more about this on our Road User Charging privacy page.
In some circumstances, other disclosures of personal data (including CCTV and body worn camera images or audio) to the police and other law enforcement agencies are permitted by data protection legislation, if they relate to the prevention or detection of crime and/or the apprehension or prosecution of offenders. Before any such disclosure takes place, the police are required to demonstrate that the personal data concerned will assist them in this respect. Each police request to TfL is dealt with on a strictly case-by-case basis to ensure that any such disclosure is lawful.
TfL have used CCTV images from London Underground for research and analysis purposes in the fight against Covind-19. For three research projects listed below, the CCTV data used is encrypted and steps are taken to anonymise the footage. All three research projects were subject to a Data Protection Impact Assessment and where CCTV data is shared with the University, there is a confidentiality agreement between the University and TfL.
- Newcastle University research, which is part of a wider research programme led by the Department for Transport and the SAGE subgroup on Environmental and Modelling are analysing images to quantify the proximity of people and their surface contact whilst using public transport, as part of wider research to understand the transmission of Covid-19.
- University College London research is to understand how infection risk would vary according to different levels of crowding using encrypted CCTV data alongside data from surface and air sampling.
- Transport for London (TfL) research is analysing images to quantify the percentage of people that do not comply with the face covering policy.
London's bus services are operated by individual bus companies on behalf of TfL. Any CCTV on London buses is the responsibility of the company that runs that particular service or route. If you require access to images of yourself recorded by a CCTV camera inside a bus you should contact the company who operates that particular bus route. You can find this information on signs displayed inside each vehicle or on our Who runs your bus page.
Docklands Light Railway
Docklands Light Railway is operated by a concession holder on behalf of TfL. Any CCTV systems in or around Docklands Light Railway stations, depots or trains are generally the responsibility of the company that holds the concession. If you require access to images of yourself recorded by a CCTV camera installed on Docklands Light Railway infrastructure you should contact the concession holder. You can do this via our Contact DLR page.
London Overground is operated by a concession holder on behalf of TfL. Any CCTV systems in or around London Overground stations, depots or trains are generally the responsibility of the company that holds the concession. If you require access to images of yourself recorded by a CCTV camera installed on London Overground infrastructure you should contact the concession holder. You can do this via our Contact London Overground page.
London's trams are operated by a concession holder on behalf of TfL. Any CCTV systems in or around tram stations, depots or trams are generally the responsibility of the company that holds the concession. If you require access to images of yourself recorded by a CCTV camera installed on tram infrastructure, you should contact the concession holder. You can do this via our Contact Trams page.
TfL Rail is operated by a concession holder on behalf of TfL. Any CCTV systems in or around TfL Rail stations, depots or trains are generally the responsibility of the company that holds the concession. If you require access to images of yourself recorded by a CCTV camera installed on TfL Rail infrastructure, you should contact the concession holder. You can do this via our Contact TfL Rail page.
Taxis and private hire vehicles
Taxis and private hire vehicles operating in London are licensed and regulated by TfL but the services are provided by independent operators and drivers. Some licensed taxi and private hire drivers/operators have installed CCTV (and, in some cases, audio recording) in their vehicles for the purposes of protecting the health and safety of drivers and passengers; and the prevention and detection of crime. Each individual driver/operator that has chosen to do so is fully responsible for their own CCTV system(s).
TfL's Taxi and Private Hire function provides formal guidance to drivers and operators wishing to install CCTV, which outlines the standards with which the equipment must comply. Once installed, CCTV equipment is examined as part of the annual taxi or private hire vehicle licensing inspection.
If you require access to images of yourself captured inside a taxi or private hire vehicle you should contact the company or driver who operates that particular vehicle. You can find this information on signage displayed inside the vehicle.
Find out more in our Guidelines for CCTV in Taxis and PHV on the Taxi & private hire publications page.
Vivacity CCTV Sensors on London's Road Network
TfL has engaged with Vivacity Street Labs Ltd to install CCTV sensors on the parts of the road network that TfL controls. The CCTV sensors will be active from April 2021.
The purpose of these sensors is to better understand how London's road network is used and to better plan traffic management in and out of our roads. Vivacity and TfL will be joint controllers for the personal data collected for this purpose.
TfL will not be able to identify any individuals from the personal data collected. The purpose of the sensors are to identify traffic patterns rather than focussing on individual vehicles or pedestrians. The aim of this monitoring is to analyse and understand how members of the public as a whole use the road network, not how specific individuals use it.
To ensure that individual vehicles or pedestrians cannot be identified, all personal data collected is encrypted using a pseudonymisation process to ensure TfL is unable to identify any individual. This encryption happens immediately after the personal data is first collected.
For 24 hours from the time of collection, Vivacity will process pseudonymised and encrypted personal data such as vehicle registration numbers and images of pedestrians when they come into the field of vision of one of their sensors. After 24 hours the pseudonymised data becomes fully anonymised and is no longer subject to the UK's data protection regime.
Vivacity is responsible for the anonymisation and ensuring that the pseudonymisation and encryption techniques are secure and robust. Additionally, Vivacity will be responsible for complying with all data subject rights requests within the initial 24-hour period.
External guidelines and best practice
TfL operates its surveillance camera systems in compliance with the data protection code of practice for surveillance cameras and personal information issued by the Information Commissioner's Office. The Code provides good practice advice for those involved in operating CCTV and other surveillance camera devices that view or record individuals. It also covers other information that relates to individuals, for example vehicle registration marks captured by ANPR equipment.
We also voluntarily comply with the 12 principles set out in the Surveillance Camera Code of Practice issued by the Home Office (which applies to local authorities and police forces in England and Wales). It states that organisations which use surveillance camera systems must:
- use them for a specified purpose in pursuit of a legitimate aim
- take into account their effect on individuals and their privacy
- be as transparent as possible about how they use them
- have clear responsibility and accountability arrangements for all surveillance activities
- have clear rules, policies and procedures in place
- have no more images and information stored than is strictly necessary
- restrict access to retained images and information
- work to meet and maintain relevant operational, technical and competency standards
- have in place appropriate security measures to safeguard against unauthorised access and use
- have effective review and audit mechanisms
- use them in the most effective way to support public safety and law enforcement
- keep associated data accurate and up to date
Accessing your personal data
You can request copies of images or footage of yourself by making a subject access request. Please note that in most cases, CCTV and body worn camera footage is only kept for a very limited time, and you shouldn't delay in making your request.
You will need to provide as much information as possible about when and where the images or images were captured (ie the specific date, time and location). You will also need to submit a clear full length photograph of yourself with your request so that we can identify you when searching for the relevant images.
Raise a concern
If you have any concerns about the way in which TfL uses surveillance camera systems to process personal data, or you want to make a complaint about an issue involving one of our cameras, please email TfL's Privacy and Data Protection Team.
You can also contact TfL's Data Protection Officer by emailing DPO@tfl.gov.uk
You are also entitled to raise a concern with the Information Commissioner's Office, the UK's independent body set up to uphold information rights. For more information, visit their website at ico.org.uk.
Changes to this page
It's likely that we'll need to update this statement from time to time, so check back here regularly to find out more. Your continued use of the site will mean that you accept those revisions. This page was last updated in October 2021.