Taxi and Private Hire: National Register of Refusals and Revocations

You should read this page alongside our general privacy page for taxi and private hire licensing.

Background

The Local Government Association (LGA) has launched a National Register of Taxi and Private Hire licence revocations and refusals, known as the NR3 register.

The overall purpose of the NR3 register is to provide a consistent means for all licensing authorities to make decisions on whether an individual is 'fit and proper' to hold a licence, so improving public safety for all users of taxi and private hire services in the UK.

In particular the NR3 register aims to tackle the issue of individuals making applications to different licensing authorities following a previous application refusal or revocation of a licence. Without the NR3 register, if drivers do not proactively disclose information about a previous revocation or refusal, there is often no way for another licensing authority to find this out.

The LGA has commissioned the National Anti-Fraud Network (NAFN) to develop and host the Register. NAFN is a shared service, hosted by Tameside Metropolitan Council, which supports public authorities to tackle fraud and share intelligence safely and securely.

In July 2020, the Department for Transport published their Statutory taxi and private hire vehicle standards stating that all licensing authorities should participate in the Register. It is anticipated that TfL will start using the NR3 register from July 2021, and a Notice will be published in advance to confirm the launch date.

Basic licensee information will be recorded in the NR3 register; it will not include the reason for the refusal or revocation. The NR3 register only applies to drivers; it does not include individuals who have had their licences suspended, nor does it include operator or vehicle licences.

If the licensing authority requires more detail about the refusal/revocation (e.g. to verify it is the same individual and/or the specific reasons for the previous decision) they will need to make a request for further information directly to that authority. The purpose of the NR3 register is to ensure that licensing authorities have all the information necessary (ie an individual's full licensing history) to help them reach a decision on whether an individual making an application is fit and proper.

Inclusion on the register does not mean that future applications will automatically be refused as decisions about new applications will consider all available information. More information about the NR3 register can be found on the Local Government Association website.

Personal information held in the NR3 register

The data fields below will relate specifically to individuals who have had taxi and private hire driver licences refused or revoked by TfL:

  1. Name
  2. Date of birth
  3. Address
  4. Driving Licence number
  5. National Insurance number
  6. Telephone number
  7. Email address
  8. Licence type: (Hackney / Private Hire / Dual)
  9. Licensing action (revocation or refusal)
  10. Date of action / date action took effect

The data fields will be added by TfL to the NR3 register in respect of revoked or refused Taxi and private hire driver licences and will be accessible to the other participating licensing authorities. There are in the region of 350 taxi and private hire licensing authorities in the UK. Equivalent data added by other licensing authorities participating in the NR3 Register will be visible to TfL.

Legal basis for sharing your personal information

Under data protection legislation, TfL is only allowed to use personal information if we have a proper reason or 'legal basis' to do so. In the case of adding or accessing data in the NR3 register, there are a number of these legal grounds we rely on. These arise from our statutory and public functions:

  • TfL has a statutory duty to regulate the taxi and private hire trades in London under the London Hackney Carriages Act 1843 and Private Hire Vehicles (London) Act 1998. This legislation covers the licensing of taxi and private hire drivers, taxi and private hire vehicles, and private hire operators. Therefore, TfL needs to collect and process your personal information to carry out this function and fulfil our legal obligations.
  • We also have a statutory duty to undertake activities to promote and encourage safe, integrated, efficient and economic transport facilities and services, and to deliver the Mayor's Transport Strategy
  • In some circumstances we have other obligations to handle your information in a certain way. In this case, the DfT Statutory taxi and private hire vehicle standards state that, 'Tools such as NR3 should be used by licensing authorities to share information on a more consistent basis to mitigate the risk of non-disclosure of relevant information by applicants'

How TfL will use the NR3 register

We will upload 'current data' to the Register on an ongoing basis (that is, where a licence has recently been refused or revoked) but we will also upload historical revocations and refusals data. When we commence participation in July 2021, we will upload historical revocations and refusals data, dating back to 1 January 2018. The retention period for records in the NR3 register will be 25 years.

We will routinely check the details of new and renewing taxi and private hire driver applicants against the NR3 register. In some situations we may also check the NR3 register during the active period of your licence, for example if there are concerns around your fitness to continue holding your licence.

Where an apparent match on the NR3 register is found, we will make a formal request to the relevant licensing authority to verify it is the same individual and for further information around the reasons for their revocation or refusal. On receipt of this, we will use that data to inform our own licensing decision. All details will be added to your driver record. We will also respond to requests from other licensing authorities for the same information.

Before joining the NR3 register, TfL completed a Data Protection Impact Assessment (DPIA) to ensure our participation properly considered all the privacy and data protection issues. This DPIA is published below.

Keeping your personal data secure

Access to the NR3 register is only possible where the licensing authority is a current member of NAFN, has signed a data processor agreement and a data sharing agreement. The NR3 register is hosted by Tameside Metropolitan Borough Council of behalf of the NAFN. The Register will be hosted in a Public Services Network (PSN) compliant environment. The PSN is a government-approved network which helps public sector organisations work together and share/access data securely over the internet. Access itself will be by specifically authorised (and trained) users from each licensing authority and will require 4 factor authentication.

All personal data stored in the NR3 register is hosted and processed within the UK. We take the privacy of our licensees very seriously. We have a range of robust policies, processes and technical measures in place to control and safeguard access to, and use of, personal information associated with taxi and private hire licensing. Any request for further information from another licensing authority will be handled securely and on a case-by-case basis. Anyone with access to personal information held in TfL's systems is required to complete TfL's privacy and data protection training on an annual basis.

Your information rights

If you would like to receive copies of the personal data TfL holds about you in connection with taxi and private hire licensing, please see our page on how to access your data. You also have a number of other information rights which include:

  • The right to question any information we have about you that you think is wrong or incomplete
  • The right to object to how we use your information or to ask us to delete or restrict how we use it
  • In some cases, the right to receive a copy of your information in a format that you can easily re-use
  • The right to complain to the regulator - the Information Commissioner's Office

The TfL Privacy and Data Protection team considers and coordinates responses to requests and complaints from people whose personal data is processed by TfL and its subsidiary companies.

You can contact TfL's Data Protection Officer by email at dpo@tfl.gov.uk

Changes to this page

It's likely that we'll need to update this statement from time to time, so check back here regularly to find out more. Your continued use of the site will mean that you accept those revisions. This page was published in June 2021.