- Reference: 2018/2655
- Question by: Keith Prince
- Meeting date: 19 October 2018
Your responses to Questions 2017/2019 and 2018/2365 indicate that TfL only requires its Contractors to retain CCTV evidence recorded on buses for about 10 days. Do you agree that the new rights given to individuals under GDPR which stipulate that the owner of CCTV evidence must provide it within 30 days of receiving a Subject Access Request (https://ico.org.uk/for-organisations/guide-to-data-protection/encryptio…) compel TfL to extend the length of time TfL requires its Bus Operators to retain this information? What plans have you made to comply with this new GDPR requirement, especially regarding the storage of CCTV evidence showing Bus Safety incidents (https://www.weareastrid.co.uk/cctv-gdpr/)?
