Given that it is now obligatory when purchasing a season ticket from London Underground Limited to purchase an Oyster card, why are purchasers not informed that specific information about their recent journeys can be displayed on screens with Oyster card readers in Tube stations? How does the registration and purchase documentation obtain the consent of purchasers to use their personal information in this manner? For what purpose is this information: a) collected; and b) further processed? To whom is this information disclosed and why? Please set out the technical and administrative security measures that LUL put in place prior to commencing processing of this personal data to ensure that it is not processed unlawfully including those taken to protect it against unauthorised access.