Request ID: FOI-1131-2223 Date published: 15 August 2022
You asked
Follow on from 0797-2223
In the below response it states that TFL has notified 5 data breaches to ICO between oct 2019 and march 2022. What was the ICO response to these breaches. Did TFL pay any fine and if so how much ? How much money did TFL spend in dealing with these data breaches.
From your response could you estimate how much time employees would have spent in dealing with complaints. I am interested in how TFL has spent tax payers money in dealing with the these complaints. Could you provide the breakdown for the last five years
We answered
TfL Ref: FOI-1131-2223
Thank you for your further request received by us on 2 August 2022.
Your request has been considered in accordance with the requirements of the Freedom of Information (FOI) Act and our information access policy.
Unfortunately we do not hold the information you have requested. As stated in the published reports to the Audit and Assurance Committee, no formal enforcement action, including fines or monetary penalty notices, was taken by the ICO in response to any of the reported breaches. TfL did not record the cost or the hours spent dealing with these data breaches. No estimate is held regarding the number of hours spent dealing with either data protection breaches or complaints, as this work forms just one part of the activity undertaken by the Privacy and Data Protection team.
Please see the attached information sheet for details of your right to appeal.
Yours sincerely
Eva Hextall FOI Case Management Team General Counsel Transport for London