External Recruitment

Personal details we hold

The personal information we hold includes:

• Name, address, telephone number, email address
• Gender
• Date of birth
• Employment history, other relevant experience, achievements, skills and qualifications
• Equalities monitoring information (if provided)
• The notes and outcome of any interviews or tests which form part of the recruitment process
• Employment references and the results of any pre-employment screening
• Any other additional information provided by you in the context of the recruitment and selection process (eg a completed health questionnaire, proof of your right to work in the UK, etc)
• Any other correspondence and call recordings relating to your recruitment

Legal basis for using your information

Under privacy and data protection legislation, TfL is only allowed to use personal information if we have a proper reason or 'legal basis' to do so. In the case of your recruitment application with TfL, these 'legal grounds' are:

• For the performance of a contract, or to take steps at your request, prior to entering into a contract:
  • In this case a contract of employment
• Where you have given your consent to TfL, for example:
  • Where you agreed we can keep your information to identify any future employment opportunities which may be of interest to you

Sometimes we also need to collect or store information that is defined as 'special category personal data'. In the case of your recruitment application this is likely to consist of the following, where you choose to provide it:

• race and ethnic origin
• religion
• health (physical or mental)
• sex life or sexual orientation

As before, there are a number of 'legal grounds' we rely on when handling this kind of information, depending on the circumstances, which are:

• Where we have your explicit consent to do so for a particular purpose
• Where it's necessary for carrying out the obligations and exercising specific rights of TfL or you in the field of employment law
• For the establishment, exercise or defence of legal claims
• Where's it's necessary for equality of opportunity or treatment
• Where it's necessary for the prevention and detection of crime or fraud

In addition, UK privacy legislation has added information about criminal allegations, proceedings or convictions to the list of special categories compiled under EU law. TfL may process this data in connection with the above legal grounds, or where necessary as part of our statutory duty to provide safe transport services.

Obtaining and using your information

The personal information we hold about you comes from the following places:

• your recruitment application and the supporting information you included with it
• pre-employment checks, vetting and references from external parties
• information created by TfL during the course of your recruitment application, such as interview notes or assessment results

TfL and the companies that process recruitment related information on our behalf will use your personal information to:

• Evaluate your application and assess your suitability for the role in question
• Make a decision about whether you should be selected for interview and appointment
• Conduct relevant pre-employment screening (eg carry out credit reference and criminal record checks; verify your address, academic qualifications and work experience)
• Review and audit the recruitment process and its outcomes
• Carry out equalities monitoring activities
• With your consent, identify any future employment opportunities which may be of interest to you

Your personal information will only be accessed and processed by authorised personnel (ie recruiting line managers, HR professionals and occupational health professionals) who are involved in the management and administration of the recruitment process and have a legitimate need to access your personal information.

As part of TfL's continuing commitment to be an inclusive and equal opportunities employer we will automatically remove (redact) personally identifiable information from CVs and covering letters to prevent unfair or unlawful discrimination when assessing individual job applications. The type of information we'll remove includes: name; email; address; location; gender; disability; ethnicity; sexuality; religion; marital status; hobbies and interests; age; date of birth; employment history dates; educational establishment names and dates studied (including addresses) and telephone number. Copies of the redacted version will be available alongside the original CVs and covering letters.

TfL may use aggregated or depersonalised recruitment data for analysis purposes - for example to ensure that we are receiving applications from all communities and that we are recruiting a diverse workforce. Individuals will not be identified using this information.

Length of time we keep information

If your application for employment is successful, TfL will then use your personal information to manage and administer its employment relationship with you. If your application is unsuccessful, TfL will retain your personal information for 12 months from the date on which the relevant recruitment campaign is closed.

This is for the following reasons:

• To respond to correspondence, concerns or complaints
• To maintain records according to rules that apply to us (for example employment law)
• To establish and defend any legal rights

If you have given us permission to do so, we may also include your details in the TfL 'Talent Pool' so that we can contact you about future employment opportunities which may be of interest to you.  

Keeping personal information secure

TfL takes the privacy of job applicants very seriously and has a range of robust policies, processes and technical measures in place to safeguard their personal information.

Access to systems that hold recruitment related information is restricted to authorised personnel through the use of unique identifiers and passwords. Your information is stored on systems that are protected by secure network architectures and are backed-up on a regular basis (to a second secure location) for disaster recovery and business continuity purposes; and to avoid the risk of inadvertent erasure or destruction.

Anyone with access to personal information held in TfL's systems is required to complete TfL's privacy and data protection training on an annual basis.

Automated processing and profiling

Under data protection legislation we have to let you know when we use your personal information to do something 'automatically' using our computers or other systems, or use it to make an automated decision (without human intervention) that significantly affects you.

TfL may use a third party anonymising tool to automate the removal of personal data from CVs and covering letters to prevent unfair or unlawful discrimination. If you wish to discuss this or raise a concern about the automatic removal of personal information from CVs and covering letters, please bring this to the attention of the Recruitment Consultant.

TfL does not make any recruitment related decisions based solely on the use of automated systems, databases or computer applications.

Sharing personal information

TfL has contracts with a number of third party service providers, who provide the administration and 'back office' services that ensure the efficient day-to-day operation of our recruitment and selection processes. These third parties will process applicant information in accordance with TfL's instructions and make decisions regarding the information as part of the delivery of their services; they are also required to put in place appropriate security measures that ensure an adequate level of protection for personal information.

In some circumstances, disclosures of applicant personal information to the police (and other law enforcement agencies) are permitted by the privacy and data protection legislation, if they are necessary for the prevention or detection of crime and/or the apprehension or prosecution of offenders. Each police request to TfL is dealt with on a strictly case by case basis to ensure that any such disclosure is lawful and proportionate.

TfL may also disclose your personal information to a third party in the following circumstances:

• If it is necessary to do so in order to establish or defend TfL's legal rights (ie in the context of a court case involving TfL)
• In an emergency where the health or personal security of an applicant is at risk
• Where TfL is otherwise required or permitted by law

Overseas processing

TfL and its service providers may process your personal information in countries both within, and outside, the the European Economic Area (EEA).

Any such processing will be carried out in strict accordance with UK and EU privacy legislation and the appropriate contractual safeguards which TfL has put in place.

Your information rights

Under data protection legislation you are entitled to ask to see any personal information that we hold about you. For more information about how to access your personal information please see the section on subject access requests in Access your data.

You also have a number of other information rights which include:

• The right to question any information we have about you that you think is wrong or incomplete
• The right to object to how we use your information or to ask us to delete or restrict how we use it
• In some cases, the right to receive a copy of your information in a format that you can easily re-use for your own purpose(s)
• The right to complain to the regulator - the Information Commissioner's Office

The TfL Privacy and Data Protection team considers and coordinate responses to requests and complaints from people whose personal data is processed by TfL and its subsidiary companies. You can contact the Data Protection Officer by email at dpo@tfl.gov.uk

Changes to this page

It's likely that we'll need to update this statement from time to time, so check back here regularly to find out more. Your continued use of the site will mean that you accept those revisions. This page was last updated in June 2021.