Very interesting , also as it’s public and both, the Data Protection Impact Assessment and the Privacy Notice complement each other.
https://tfl.gov.uk/corporate/privacy-and-cookies/wi-fi-data-collection
[protecting people by good design, solid security, efficient processes and trusted services]