| Legal transfer of data - FIRST Great Western Ltd to Great Western Railway Ltd Posted by grahame at 14:19, 27th October 2026 |     |
From my email ...
Hi Graham,
From the 13th of December, GWR will be operated by a new company Greater Western Railway Limited as part of a planned transition into public ownership. Although the legal operator is changing, you'll continue to see the same GWR, and the same teams running your trains.
Responsibility for your personal data will transfer from First Greater Western Limited to Greater Western Railway Limited. This is a legal change only - your data will continue to be handled in the same systems, by the same teams, and used for the same purposes.
You don't need to take any action now. The updated privacy notice for Greater Western Railway Limited will be published on the 13th of December.
Our reasons for collecting and using your data remain unchanged. The new operator will also have some additional responsibilities - such as the Freedom of Information Act - but these won't affect how your data is used day to day.
From the 13th of December, GWR will be operated by a new company Greater Western Railway Limited as part of a planned transition into public ownership. Although the legal operator is changing, you'll continue to see the same GWR, and the same teams running your trains.
Responsibility for your personal data will transfer from First Greater Western Limited to Greater Western Railway Limited. This is a legal change only - your data will continue to be handled in the same systems, by the same teams, and used for the same purposes.
You don't need to take any action now. The updated privacy notice for Greater Western Railway Limited will be published on the 13th of December.
Our reasons for collecting and using your data remain unchanged. The new operator will also have some additional responsibilities - such as the Freedom of Information Act - but these won't affect how your data is used day to day.
and
Questions
Why is my data being transferred?
The transfer ensures continuity of service with minimal impact on you. First Greater Western Limited is transferring your data in reliance on its legitimate interests (Article 6(1)(f) UK GDPR), having assessed that the transfer is necessary and fair so that services continue to run smoothly.
First Greater Western Limited’s privacy policy explains that your data may be passed to a successor operator if the franchise operations transfer.
What data is involved?
All personal data held by First Greater Western Limited in connection with rail services will be made available to Greater Western Railway Limited. This may include contact details, booking history, payment records, and customer service correspondence. It will only continue to be used for the same purposes it was originally collected for. Your data will continue to be held only as long as needed to deliver services and meet legal obligations.
What are my rights?
You still have the same rights under data protection law, including:
• The right to access your data
• The right to ask for corrections
• The right to object to processing based on legitimate interests
• The right to ask for deletion (in some circumstances)
• The right to restrict how your data is used
• The right to complain to the Information Commissioner's Office (ICO)
You can find out more about your rights at ico.org.uk.
You can find out more about programme to transfer rail services into public ownership and establish GBR as the body responsible for passenger services and infrastructure at gov.uk/guidance/great-british-railways.
To exercise your data rights before the 13th of December, please contact GWR at:
CONTACT DETAILS: GWR-DPO@gwr.com
POSTAL ADDRESS: MH101, GWR, Milford House, Swindon, SN1 1HL
Registered office: First Greater Western Limited, Milford House, 1 Milford Street, Swindon, Wiltshire, SN1
Why is my data being transferred?
The transfer ensures continuity of service with minimal impact on you. First Greater Western Limited is transferring your data in reliance on its legitimate interests (Article 6(1)(f) UK GDPR), having assessed that the transfer is necessary and fair so that services continue to run smoothly.
First Greater Western Limited’s privacy policy explains that your data may be passed to a successor operator if the franchise operations transfer.
What data is involved?
All personal data held by First Greater Western Limited in connection with rail services will be made available to Greater Western Railway Limited. This may include contact details, booking history, payment records, and customer service correspondence. It will only continue to be used for the same purposes it was originally collected for. Your data will continue to be held only as long as needed to deliver services and meet legal obligations.
What are my rights?
You still have the same rights under data protection law, including:
• The right to access your data
• The right to ask for corrections
• The right to object to processing based on legitimate interests
• The right to ask for deletion (in some circumstances)
• The right to restrict how your data is used
• The right to complain to the Information Commissioner's Office (ICO)
You can find out more about your rights at ico.org.uk.
You can find out more about programme to transfer rail services into public ownership and establish GBR as the body responsible for passenger services and infrastructure at gov.uk/guidance/great-british-railways.
To exercise your data rights before the 13th of December, please contact GWR at:
CONTACT DETAILS: GWR-DPO@gwr.com
POSTAL ADDRESS: MH101, GWR, Milford House, Swindon, SN1 1HL
Registered office: First Greater Western Limited, Milford House, 1 Milford Street, Swindon, Wiltshire, SN1
