The Government has announced a series of measures to tackle the Coronavirus. It is essential for London, and in particular for all critical workers, that we continue to provide a safe transport network that enables them to make the journeys they need to.
In current circumstances, we are not able to answer Subject Access requests or process deletion requests readily, and we ask that you please do not make a request to us at present. In particular, this means that it may not be possible to fulfil non-statutory requests for cctv footage to support insurance claims.
Please note that in respect of requests for London Underground cctv in particular: we are unable to process these at all in the current circumstances. These requests require specialist staff to travel to individual stations to download and collect the footage. We have taken the decision that in order to protect the wellbeing of staff and other critical workers using the network, this type of travel cannot be undertaken at this time.
Answering requests will require the use of limited resources and the attention of staff who could be supporting other essential activity. In any event, please note that our response time will be affected by the current situation. If you do submit a request, please use the relevant form on our Access Your Data page or email DPO@tfl.gov.uk rather than send by post.
We sometimes need to collect your personal information so that we can provide you with the full range of our services, operate London's transport network effectively and carry out our statutory functions. Here, we outline our obligations and your rights under the data protection legislation, which regulates the use of personal information by all private and public sector organisations.
TfL is a statutory body created by the Greater London Authority (GLA) Act 1999. The GLA Act gives the Mayor of London a general duty to develop and apply policies to promote and encourage safe, integrated, efficient and economic transport facilities and services to, from and within London. This is known as the 'General Transport Duty'. The Mayor delegates this duty to TfL to carry out on their behalf, together with the implementation of the Mayor's Transport Strategy.
Under data protection legislation, TfL is only allowed to use personal information if we have a proper reason or 'legal basis' to do so. In most cases, our handling of your personal information will be necessary for the delivery of the Mayor's Transport Strategy and the statutory functions described above.
Depending on the TfL product or service you use or sign up for, there may be another legal basis that makes the handling of your personal information lawful. You should refer to the menu of privacy pages on this page for more information.
If you are asked to provide information when applying for, or using, specific TfL services (eg the Zip Oyster photocard or Santander Cycles schemes) these pages outline how we use and protect this information.
If you are currently receiving service messages or marketing communications from TfL and no longer wish to do so, please let us know by emailing email@example.com.
We do not sell your personal information to anyone. We don't share your personal information with any third parties unless they are providing services to us under contract or disclosure is permitted by, or required by, law. Please refer to the menu of privacy pages on this page for more information.
Our website contains links to sites owned and operated by third parties. They have their own privacy policies, and we urge you to review them before browsing those sites. We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.
Your privacy is very important to TfL, and we take all necessary measures to ensure your personal information is properly protected and secured. This includes having appropriate technical and organisational arrangements to secure your information. TfL will never send an unsolicited message asking you to provide your password, financial details or other sensitive information by email or through a link.