Request ID: FOI-1340-2223 Date published: 28 September 2022
You asked
could you confirm how much amount TFL paid in settlement for any data breach complaints that they have received in the last five years and under which category have they settled this ? is it legal fee or data protection complaint or something else
We answered
TfL Ref: FOI-1340-2223 Thank you for your request received by Transport for London (TfL) on 1 September 2022, asking for information about the cost of settlements for data breach complaints made by TfL in the last five years. Your request has been considered in accordance with the requirements of the Freedom of Information Act and our information access policy. I can confirm that we hold the information you require. Complaints relating to alleged data breaches are recorded and dealt with by a variety of departments within TfL. Unfortunately, to provide the information you have requested, covering the last five years, would exceed the ‘appropriate limit’ of £450 set by the Freedom of Information (Appropriate Limit and Fees) Regulations 2004. This is because we don’t have a central record of payments made by TfL in settlement of data breach complaints. We would have to manually identify and search a number of different departments across TfL to try to locate the information you require. Under section 12 of the FOI Act, we are not obliged to comply with a request if we estimate that the cost of determining whether we hold the information, locating and retrieving it and extracting it from other information would exceed the appropriate limit. This is calculated at £25 per hour for every hour spent on the activities described. We have estimated that it would considerably exceed the cost limit to provide a response to your current request. To help bring the cost of responding to your request within the £450 limit, you may wish to consider narrowing its scope so that we can more easily locate, retrieve and extract the information you are seeking. You should identify the information that you want as clearly and concisely as you can, specifying the types of document that you are looking for. You might also consider limiting your request to a shorter period of time, geographical area or specific departments of TfL. Please be aware that the details and basis on which payments are made, or settlements reached, in respect of alleged data breaches are likely to be commercially confidential. Please note that we will not be taking further action until we receive your revised request. In the meantime, if you have any queries or would like to discuss your request, please do not hesitate to contact me. Please see the attached information sheet for details of your right to appeal. Yours sincerely Eva Hextall FOI Case Management Team General Counsel Transport for London
