Data Protection

Meeting: 
MQT on 2003-11-19
Session date: 
November 19, 2003
Reference: 
2003/2084
Question By: 
Lynne Featherstone
Organisation: 
Liberal Democrats
Asked Of: 
The Mayor

Question

Given that it is now obligatory when purchasing a season ticket from London Underground Limited to purchase an Oyster card, why are purchasers not informed that specific information about their recent journeys can be displayed on screens with Oyster card readers in Tube stations? How does the registration and purchase documentation obtain the consent of purchasers to use their personal information in this manner? For what purpose is this information: a) collected; and b) further processed? To whom is this information disclosed and why? Please set out the technical and administrative security measures that LUL put in place prior to commencing processing of this personal data to ensure that it is not processed unlawfully including those taken to protect it against unauthorised access.

.

Answer

Answer for Data Protection

Answer for Data Protection

Answered By: 
The Mayor

As the display of journey data stored on the card is in the possession of the cardholder, there is no data protection requirement to inform customers that it is available to be viewed on screen. The cardholder is given the option whether to view the information or not. This data is duplicated in the central system and is handled in accordance with the Data Protection Act. It is collected and processed in accordance with the Fair Obtaining Notice signed by a customer before he/she receives an Oystercard. The data is collected for several reasons. In personalised form it will be retained for 8 weeks for ticket administration purposes such as resolving customer questions about the charges for specific journeys as well as monitoring fare evasion and fraudulent ticket use. The data may also be used to communicate with customers about TfL services in accordance with the customer's wishes as indicated on the Fair Obtaining Notice. Any data that is processed is de-personalised. In this form, the data will be used to provide a source of transport planning data. There are no plans to share any of the data in either personalised or de-personalised form with third parties. However, TfL anticipate that the MPS may seek information and we will comply if requested. .