TfL Ref: FOI-2275-2425

Thank you for your clarified request received by Transport for London (TfL) on 1 November 2024 asking for information about the staff working on the Piccadilly line upgrade. 

Your request has been considered in accordance with the requirements of the Freedom of Information (FOI) Act and our information access policy. I can confirm that we hold the information you require. 

2 employees who worked on the project attended West Ruislip station on 14 October 2024. 12 employees have visited the Vienna factory between May and August 2024.  

Regarding the names of these individuals, in accordance with TfL’s obligations under Data Protection legislation, we are withholding this information as required by section 40(2) of the FOI Act. Disclosure of this personal data would be a breach of the legislation, specifically the first principle of Article 5 of the UK General Data Protection Regulation which requires all processing of personal data to be fair and lawful. It would not be fair to disclose this personal information when the individuals have no expectation it would be disclosed and TfL has not satisfied one of the conditions which would make the processing ‘fair’.

This exemption to the right of access to information is an absolute exemption and not subject to an assessment of whether the public interest favours use of the exemption.

We are additionally withholding this information under sections 24 (National security) and 31(1) (Prevention and detection of crime) of the FOI Act. Whilst we have disclosed similar information in the past, and while we make no suggestion that you would use this information for anything other than your own personal interest, disclosure of this information to you has to be regarded as a disclosure to ‘the public at large’ and so we must consider the possible current impact from disclosure of any information we may hold. We consider that the names of these individuals could be misused, which would likely prejudice our efforts to prevent future attacks and undermine our ability to safeguard the London transport network.

The London transport system is a critical piece of national infrastructure and as such we employ rigorous safeguards to protect it from cyber-attack. Like other organisations we are subject to attempted cyber-attacks. These attacks are unlawful under the Computer Misuse Act, and whilst the motive is not always apparent, we are aware of the risk to critical national infrastructure that may result from a successful attack. In this instance the exemptions apply as this information could potentially be obtained and utilised by individuals who may wish to use this information to cause disruption or harm to our networks, which are critical to the operation of London’s transport system.

The use of these exemptions is subject to an assessment of the public interest in relation to the disclosure of the information concerned. We recognise the need for openness and transparency by public authorities, but in this instance we consider that there is greater public interest in safeguarding our information systems and protecting the integrity of the London transport network.

Please see the attached information sheet for details of your right to appeal. 

Yours sincerely,

Mary Abidakun

FOI Case Officer

FOI Case Management Team

General Counsel