Follow this request
There are 4 people following this request
Act on what you've learnt
Similar requests
Clarification regarding the recent TFL Oyster card problem and the current MiFare classic chip "hack" publishing case in Holland
To Transport for London by A Watt 21 July 2008
Data stored on Oyster cards, 2011
To Transport for London by John Drinkwater 13 May 2011
FOI request summary
To Transport for London by Felicity Groombridge 17 May 2011
Hillingdon First
To Hillingdon Borough Council by Paul Grimshaw 20 April 2009
£10 admin charges for Oyster refunds
To Transport for London by K Sutton 31 May 2011
Oyster card usage
To Transport for London by Ivo Addai 19 January 2011
Oyster Pay As You Go on Heathrow Connect
To Transport for London by Matthew Dickinson 29 December 2011
Oyster Card Helpline - call recordings
To Transport for London by Mr Holland 27 January 2010
HillingdonFirst
To Hillingdon Borough Council by Jonathan Wright 9 August 2010
Oyster Ticket Stops
To Transport for London by Steve Elibank 13 May 2011
Data stored on Oyster cards
Harry Metcalfe made this Freedom of Information request to Transport for London
The request was partially successful.
From: Harry Metcalfe
28 July 2008
Dear Sir or Madam,
What data is stored on Oyster cards? Please could I have a list.
Yours faithfully,
Harry Metcalfe
From: Enquire (TfL)
Transport for London
28 July 2008
Ref: TFL084265
Dear Harry
Thank you for your email received by Transport for London (TfL) on 28
July.
You have asked for information on a list of data that is stored on Oyster
cards.
We will deal with your request as soon as possible, and in any case
provide you with a response by 25 August.
In the meantime, if you have any queries or would like to discuss your
request, please do not hesitate to contact me.
Thank you once again for contacting us.
Yours sincerely
Adeniyi Adegoroye
Transport for London
Central Customer Services
As part of our continuing efforts to improve our services to our
customers, TfL undertakes, from time to time, research aimed at
identifying issues and opportunities. We may contact you in the next few
weeks via our appointed research agency, GFK NOP, in connection with your
recent communication with us. If you are contacted, we would greatly
appreciate your contribution to the research survey. Any information that
you give would be totally confidential and you would not be identified
personally. If you do not wish to be contacted for research purposes,
please could you let us know.
show quoted sections
From: Enquire (TfL)
Transport for London
31 July 2008
Ref: TFL084265
Dear Harry
Thank you for your email received by Transport for London (TfL) on 28
July.
Unfortunately, from the description provided, we cannot identify the
information you requested. This is because there is much information
stored on the Oyster card, of which some is technical and confidential.
It might help us if you could provide a more detailed description of the
information you're seeking together with any other details you think might
help us locate the information you require. For example, are you enquiring
if personal data, history of travel or Pay As You Go (PAYG) value is
stored on the card?
Please note that the 20 working day deadline for responding to requests
under the Freedom of Information Act will not begin until we receive some
additional information to help clarify your request.
In the meantime, if you have any queries or would like to discuss your
request, please do not hesitate to contact me.
Thank you once again for contacting us.
Yours sincerely
Adeniyi Adegoroye
Transport for London
Central Customer Services
As part of our continuing efforts to improve our services to our
customers, TfL undertakes, from time to time, research aimed at
identifying issues and opportunities. We may contact you in the next few
weeks via our appointed research agency, GFK NOP, in connection with your
recent communication with us. If you are contacted, we would greatly
appreciate your contribution to the research survey. Any information that
you give would be totally confidential and you would not be identified
personally. If you do not wish to be contacted for research purposes,
please could you let us know.
show quoted sections
From: Harry Metcalfe
31 July 2008
Dear Adeniyi,
I am interested in all of the data that is stored on the card.
Perhaps I could have a list of the fields, with the confidential
ones redacted?
Many thanks,
Harry Metcalfe
From: Enquire (TfL)
Transport for London
5 August 2008
Ref: TFL084757
Dear Harry
Thank you for your email received by Transport for London (TfL) on 31
July.
You have asked for a list of all data that is stored on Oyster cards,
while redacting any confidential information.
We will deal with your request as soon as possible, and in any case
provide you with a response by 29 August.
In the meantime, if you have any queries or would like to discuss your
request, please do not hesitate to contact me.
Thank you once again for contacting us.
Yours sincerely
Adeniyi Adegoroye
Transport for London
Central Customer Services
As part of our continuing efforts to improve our services to our
customers, TfL undertakes, from time to time, research aimed at
identifying issues and opportunities. We may contact you in the next few
weeks via our appointed research agency, GFK NOP, in connection with your
recent communication with us. If you are contacted, we would greatly
appreciate your contribution to the research survey. Any information that
you give would be totally confidential and you would not be identified
personally. If you do not wish to be contacted for research purposes,
please could you let us know.
show quoted sections
From: Enquire (TfL)
Transport for London
29 August 2008
Ref: TFL084757
Dear Harry
Thank you for your email received by Transport for London (TfL) on 31
July. You asked for a list of all data that is stored on Oyster cards,
while redacting any confidential information.
Your request has been dealt with under the terms of the Freedom of
Information (FOI) Act and I can confirm that TfL does hold the information
you have requested.
Please see information below on the list of data stored on the Oyster Card
which we can disclose:
* Generic Card Data: Identification number of the card, Pay As You Go
(PAYG) Balance, Passenger type, type of discount, Photocard
identification number if applicable, Staff identification number if
applicable, the deposit value, and Registration flag.
* PAYG top up Data: Date, Time, Location, and value added.
* Ticket Data: Type of ticket, start and expiry date, and time
restriction if applicable.
* Transaction Data: Date, Time, Station number or bus route, and fare
charged.
TfL is not obliged to supply some of the information you have requested,
as it is subject to the following statutory exemption to the right of
access to information:
* SECTION 43 - COMMERCIAL INTERESTS
Some information related to your request is exempt from disclosure under
section 43(2) of the FOI Act as disclosure of the structure and the nature
of the data stored on the card would, or would be likely to, prejudice
TfL's commercial interests. This data is critical as it is the core of
fare calculation and putting it into the public domain would give
potential fraudsters considerable assistance in any intended attack on the
security of the system.
This commercial prejudice would, or would be likely to, arise from the
effect a breach of the Oyster system would have on TfL's revenue.
Knowledge of the redacted information would allow fraudsters to identify
data stored in the card and then modify them, changing the characteristics
of a ticket for example allowing them to travel free on the transport
network.
Section 43(2) is a qualified exemption which means it can be used only if
the public interest in applying the exemption is greater than the public
interest in disclosure. It is recognised that there is a degree of public
interest in the disclosure of this information to allow members of the
public understand the complexity of the Oyster system much better, and
demonstrate TfL's transparency and accountability for its decisions.
However, there is also considerable public interest in ensuring that TfL
protects the security of the Oyster card system from potential fraudsters.
It is considered that at the current time this is a public interest that
outweighs the public interest in disclosure and accordingly justifies the
use of section 43(2).
If you are not satisfied with this response, please read the attached
help-sheet entitled `Your Right to Appeal'
Thank you once again for contacting us.
Yours sincerely
Adeniyi Adegoroye
Transport for London
Central Customer Services
As part of our continuing efforts to improve our services to our
customers, TfL undertakes, from time to time, research aimed at
identifying issues and opportunities. We may contact you in the next few
weeks via our appointed research agency, GFK NOP, in connection with your
recent communication with us. If you are contacted, we would greatly
appreciate your contribution to the research survey. Any information that
you give would be totally confidential and you would not be identified
personally. If you do not wish to be contacted for research purposes,
please could you let us know.
Your Right to Appeal
Internal Review
If you are dissatisfied with the way TfL has handled your information
request, you can ask us to conduct an internal review of our decision.
The internal review will be conducted by someone other than the person who
made the original decision, in accordance with the complaints procedure
published on our website at [1]www.tfl.gov.uk/foi.
Requests for internal review should be addressed to:
Head of Information Access and Compliance
6^th Floor Windsor House
42 - 50
Victoria Street
London
SW1H 0TL
Complaints to the Information Commissioner
If, following the internal review, you remain dissatisfied with the way
TfL has handled your request, then you can take your complaint to:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
A complaint form is available on the Information Commissioner's Office
website
[2]www.ico.gov.uk
show quoted sections
References
Visible links
1. http://www.tfl.gov.uk/foi
2. http://www.ico.gov.uk/
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Make and explore Freedom of Information requests





