Data protection - Network Rail

At Network Rail we aim to handle personal information in a fair, accountable and safe way, in line with the GDPR (General Data Protection Regulation) and the UK Data Protection Act 2018.

We will collect adequate and relevant personal information to support our activity, and will make sure the information we hold is accurate and up to date. We won’t keep your information for longer than is necessary and will use appropriate security measures to protect it.

Your rights

The GDPR provides you, the data subject, with the following rights:

Law enforcement disclosure requests

If you wish to make a request for personal data on behalf of a law enforcement agency, please use the form below and contact the relevant Network Rail function or email the data protection officer.

Related download

Law enforcement disclosure request form – (PDF, 407KB)

Data Protection Complaints

A data protection complaint is when a person is dissatisfied with the way your personal information is collected, handled via a Rights request or our security measures, is handled via a rights request, the security measures to protect it or collected and used.

For example, you may submit complaints about:

the way we have responded to their subject access request (SAR), or other rights request;
the security measures we have used to store their information (e.g. someone who has been impacted by a data breach); or
how we have collected or used their personal information (e.g. where we stored it, how long we kept it for, or its accuracy).

You can raise a data protection complaint by contacting at: data.protection@networkrail.co.uk

If you remain dissatisfied after receiving our response to your complaint, you have the right to complain directly to the regulator, the Information Commissioner’s Office (ICO).

Contact us

Data protection officer
Network Rail
Data Protection
1st Floor Willen,
The Quadrant
Milton Keynes
MK9 1EN

data.protection@networkrail.co.uk