Crucially, if you are making a formal complaint about an incident or a missing item, such as a smartphone, you should submit a Subject Access Request (SAR) at the same time. Filing a complaint does not always guarantee that footage will be preserved; a separate SAR ensures that the Data Protection Officer is legally required to identify and protect the relevant data before it is overwritten.
This directory provides the direct contact details for Data Protection Officers (DPOs) at London Bus operating companies and National Rail Train Operating Companies for submitting a Subject Access Request (SAR) under UK GDPR.
Official Guidance
Before contacting an operator, you may find it helpful to review the official guidance on your rights:
- Information Commissioner’s Office (ICO): Getting copies of your information (SAR)
- GOV.UK: How to request CCTV footage of yourself
TfL-Contracted Bus Companies:
To find out which company operates a specific London bus route, you can check the official TfL list or the operational details on the unofficial London Bus Routes website.
Arriva London
0344 800 44 11 - Opening hours are: 8am to 5pm Monday to Friday
020 8271 0101 - Arriva London
https://www.arrivabus.co.uk/help/contact-us
data.protection@arriva.co.uk
https://www.arrivabus.co.uk/privacy-policy
Bus onboard CCTV is retained for a maximum of 14 days (however in some cases a maximum of 10 days). Depot and Garage CCTV is retained for a maximum of 30 days.
First Bus
0345 646 0707 between 8am and 6pm Monday to Fridays
https://www.firstbus.co.uk/london/help-support/contact-us
FirstBus.DPO@firstgroup.co.uk or fbl.gdpr.support@firstbuslondon.co.uk
https://www.firstbus.co.uk/privacy-policy
https://www.firstbus.co.uk/london/help-support/cctv-and-audio-privacy-notice
On buses, the CCTV images are recorded over continually and retained for a maximum of 12 days before it is overwritten automatically, unless downloaded for legitimate reasons.
Go-Ahead London
020 8545 6100
https://www.goaheadlondon.com/contact
hr@goaheadlondon.com or dataprotection@goaheadlondon.com or cctvdata@goaheadlondon.com
https://www.goaheadlondon.com/privacy-policy
On-bus CCTV data is overwritten after 10 – 12 days.
Metroline
020 8342 6900
https://www.metroline.co.uk/contact/
dataprotectionofficer@metroline.co.uk
https://www.metroline.co.uk/privacy-notice/
Stagecoach
0345 241 8000 - Between 8:00 and 18:00 from Monday to Friday and between 09:00 and 17:00 Saturday and Sunday
https://www.stagecoachbus.com/help-and-contact
ukbus.datacontroller@stagecoachbus.com
https://www.stagecoachbus.com/privacy-policy
Transport UK
020 7788 8550
https://www.transportukbus.com/contact-us/general-enquires/
privacy@transport-uk.com
https://www.transportukbus.com/privacy-policy/
Uno Bus
01707 255 764 (7am - 7pm, Mondays to Fridays)
https://www.unobus.info/contact-us/
dataprotection@herts.ac.uk
Uno Bus is a wholly owned subsidiary of the University of Hertfordshire, Universitybus Limited
https://www.unobus.info/privacy-policy/
Privacy information for other Transport for London services:
https://tfl.gov.uk/corporate/privacy-and-cookies/
For CCTV footage from bus stations, certain bus stops and other TfL services, including the Underground:
https://tfl.gov.uk/corporate/privacy-and-cookies/cctv
DPO@tfl.gov.uk
0343 222 1234 - 24 hours a day, 7 days a week
https://tfl.gov.uk/help-and-contact/
National Rail Train Operating Companies
For station footage, check who manages the station via National Rail. For onboard footage, contact the operator of the specific train.
Avanti West Coast
0345 528 0253 - Monday to Sunday & Public Holidays: 08:00 - 22:00
https://www.avantiwestcoast.co.uk/help-and-support/contact-us
Avanti.DPO@firstgroup.co.uk
https://www.avantiwestcoast.co.uk/about-us/policies-and-procedures/privacy-policy
c2c
0345 744 4422 - Monday to Friday: 08:00 - 20:00, Saturday to Sunday & Public Holidays: 09:00 - 16:00
https://www.c2c-online.co.uk/help-feedback/contact-us/
dpo@c2crail.net
https://www.c2c-online.co.uk/about-c2c/our-policies/privacy-cookies-notice/
Caledonian Sleeper
0330 060 0500 - 09:00 - 17:30 Monday to Friday, 08:30 - 15:30 Saturday, 12:00 - 20:30 Sunday
https://www.sleeper.scot/help-support/contact-us/
dpo@caledoniansleeper.scot
https://www.sleeper.scot/auxiliary/privacy-policy/
Chiltern Railways
0345 600 5165 - Monday to Sunday & Public Holidays: 08:00 - 20:00
https://www.chilternrailways.co.uk/customer-service
data.protection@chilternrailways.co.uk
https://www.chilternrailways.co.uk/privacy
CrossCountry Trains
03447 369 123 - Monday to Friday: 09:00 - 17:00, Saturday: 09:00 - 16:00
https://www.crosscountrytrains.co.uk/help-support/
xcdataprotection@crosscountrytrains.co.uk
https://www.crosscountrytrains.co.uk/privacy/data-protection-faqs
East Midlands Railway
03457 125 678 - Lines are open 24 hours a day, 7 days a week.
https://www.eastmidlandsrailway.co.uk/help-manage/manage/contact-us
dsar@eastmidlandsrailway.co.uk or
https://www.eastmidlandsrailway.co.uk/data-subject-rights-request
https://www.eastmidlandsrailway.co.uk/help-manage/about-us/policies/privacy-cookie
Eurostar
+44 (0)3432 186 186 - Monday to Sunday - 07:00 - 19:00 (UK time)
https://www.eurostar.com/uk-en/contact-us/eurostar-contact-details
data.protection@eurostar.com
https://www.eurostar.com/uk-en/privacy-policy
Govia Thameslink Railway (Trading as: Gatwick Express, Great Northern, Southern and Thameslink)
0345 850 1530 - Open 07:00 - 20:00
https://www.gatwickexpress.com/help-and-support/contact-us
0345 026 4700 - Open 07:00-20:00
https://www.greatnorthernrail.com/help-and-support/contact-us
03451 27 29 20 - Open 07:00-20:00
https://www.southernrailway.com/help-and-support/contact-us
0345 026 4700 - Open 07:00-20:00
https://www.thameslinkrailway.com/contact-us/
privacy@gtrailway.com or
data.protection@go-ahead.com
https://gtrailway.com/privacy-policy/
Grand Central
0345 603 4852 - option 4 (07.00 - 19.00, Monday to Friday, 09.00 - 12.30pm Saturday to Sunday)
https://help.grandcentralrail.com
gcdataprotection@grandcentralrail.com
https://www.grandcentralrail.com/privacy-policy
Greater Anglia (also Stansted Express)
0345 600 7245 - Monday to Saturday: 08:00-20:00, Sunday: 10:00-20:00, Bank Holidays: 09:00-18:00
https://www.greateranglia.co.uk/contact-us
dataprotection@greateranglia.co.uk
https://www.greateranglia.co.uk/privacy-notice
https://www.stanstedexpress.com/about-us/privacy-policy
Great Western Railway
03457000125 - Monday to Friday & Public Holidays: 06:00 - 22:00, Saturday to Sunday: 07:00 - 23:00
https://www.gwr.com/help-and-support/contact-us
GWR.DPO@firstgroup.co.uk or
GWR-DPO@gwr.com
https://www.gwr.com/privacy-policy
Heathrow Express
03456001515
https://www.heathrowexpress.com/contact-us
privacy@heathrow.com or
HeathrowEURepresentative@eversheds-sutherland.com
https://www.heathrowexpress.com/privacy-notice
Hull Trains
0345 071 0222 - 7 days a week 0800 – 2200 except Christmas Day and 26th December
https://www.hulltrains.co.uk/support-and-contact/contact-us
HullTrains.DPO@hulltrains.co.uk
https://www.hulltrains.co.uk/privacy-policy
London North Eastern Railway
0345 722 5333
https://www.lner.co.uk/support/
customers@lner.co.uk or
data.safe@lner.co.uk or
https://support.lner.co.uk/s/forms/data-protection-form
https://www.lner.co.uk/footer/privacy-policy/
Lumo
0345 528 0409 - 06:00 to 23:00 Monday to Sunday except Christmas and Boxing Day
https://www.lumo.co.uk/help
ECTL.DPO@firstgroup.co.uk or
https://www.railhelp.co.uk/lumo/raise-data-protection-concern
https://www.lumo.co.uk/about-us/policies-and-procedures/privacy-policy
Merseyrail
0151 555 1111 - Monday to Friday from 07:00 to 19:00hrs
https://www.merseyrail.org/help-support/contact-us/
privacy@merseyrail.org or
Privacy@transport-uk.com
https://www.merseyrail.org/privacy-policy/
Northern
0800 200 6060
https://www.northernrailway.co.uk/about-us/contact-directory
dataprotection.officer@northernrailway.co.uk
https://www.northernrailway.co.uk/legal/privacy-policy
Scotrail
0344 811 0141 - Monday to Sunday & Public Holidays: 07:00 - 22:00
https://www.scotrail.co.uk/about-scotrail/contact-us
data.protection.officer@scotrail.co.uk
https://www.scotrail.co.uk/privacy-policy
Southeastern
0345 322 7021
https://www.southeasternrailway.co.uk/get-in-touch/contact-us
information-rights@southeasternrailway.co.uk
https://www.southeasternrailway.co.uk/privacy-notice-and-cookies/privacy-policy
South Western Railway
0345 6000 650 - Monday to Friday 08:00 - 20:00, Saturday 09:00 -18:00, Sunday 09:00 –16:00
https://www.southwesternrailway.com/contact-and-help/contact-us
dpo@swrailway.com
https://www.southwesternrailway.com/privacy-policy
Transpennine Express
0345 600 1671 - 06:00 and 23:00, 7 days a week
https://www.tpexpress.co.uk/help/contact-us
tpe.dataprotection@tpexpress.co.uk
https://www.tpexpress.co.uk/privacy-policy
TfL's Elizabeth line, London Overground, London Underground, and other services (both trains and stations).
0343 222 1234 - 24 hours a day, 7 days a week
https://tfl.gov.uk/help-and-contact/
DPO@tfl.gov.uk
https://tfl.gov.uk/corporate/privacy-and-cookies/
data.protection@go-ahead.com (GTS Rail Operations for the Elizabeth line)
https://gtsr.co.uk/privacy-policy/
data.protecion@arrivarl.co.uk (Arriva Rail London for the London Overground)
https://www.arrivaraillondon.co.uk/privacy-policy/
Note: The London Overground contract with Arriva Rail London is due to end on 3 May 2026, with First Rail London (a subsidiary of FirstGroup) taking over.
Transport for Wales
03333211202 - 08:00 - 20:00 Monday to Saturday and 11:00 - 20:00 Sunday
https://tfw.wales/help-and-contact/rail/contact-us
dataprotection@tfw.wales or
DPO@tfw.wales or
https://tfw.wales/about-us/transparency/freedom-of-information/data-protection-request
https://tfw.wales/website-privacy-statement
West Midlands Trains (Trading as: West Midlands Railway and London Northwestern Railway)
0333 311 0039 - Monday to Friday: 7am – 7pm. Weekends and Bank Holidays: 8am – 4pm
https://www.westmidlandsrailway.co.uk/contact-us
0333 311 0006 - Monday to Friday: 7am – 7pm. Weekends and Bank Holidays: 8am – 4pm
https://www.londonnorthwesternrailway.co.uk/contact-us
customer.relations@wmtrains.co.uk
https://www.westmidlandsrailway.co.uk/subject-access-requests
Station Operators
Network Rail
03457114141
https://www.networkrail.co.uk/communities/contact-us
data.protection@networkrail.co.uk
https://www.networkrail.co.uk/footer/privacy-notice/
Transport for Greater Manchester - Bee Network
0161 244 1000 - Monday to Friday: 7am to 8pm, Weekends and Bank Holidays: 8am to 8pm
data.protection@tfgm.com
https://tfgm.com/privacy-policy
Template emails
Speed is key for bus requests, as CCTV is often overwritten in as little as 7 to 14 days. This applies to all UK bus services, including those operating outside of London. Use the template below to contact the bus operator's Data Protection Officer immediately. If you do not have the fleet number, try to provide the exact stop name and direction of travel to help them locate the correct vehicle.
To: Email Address of Data Protection Officer / Customer Services Team of Bus Operating Company or Transport Authority
Subject: URGENT: Subject Access Request – CCTV Footage – [Date] – [Route Number]
Dear Data Protection Officer,
I am writing to make a formal Subject Access Request under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
I require access to CCTV footage involving myself from a journey on one of your services. As I understand that bus CCTV is frequently overwritten within 7–14 days, please treat this as an urgent request to preserve the data immediately.
Journey Details:
Date: [e.g. Thursday, 19 February 2026]
Time: [e.g. Between 08:15 and 08:45]
Route Number: [Insert Route Number, e.g. 123]
Direction of Travel: [Insert Direction, e.g. Northbound / Towards City Centre]
Vehicle Registration / Fleet Number: [Insert if known, otherwise state "Unknown"]
Location/Stop: [Insert Boarding or Incident Location, e.g. High Street Stop]
Description of Incident / Missing Item:
[Briefly describe what happened, e.g., "I left a grey laptop bag on the upper deck" or "I was involved in a fall while the bus was braking"].
[OPTIONAL SECTION: Use if a crime was committed]
Crime Prevention & Law Enforcement Disclosure:
I am a [victim/witness] of a crime (e.g. theft of a smartphone, robbery or harassment) that occurred during this journey. I am making this request in accordance with Schedule 2, Part 1, Paragraph 2 of the Data Protection Act 2018, which allows for the disclosure of data for the prevention or detection of crime.
Crime Reference Number: [Insert Number]
If you cannot release this footage directly to me, please confirm that you have preserved it and will make it available to the police upon their request.
Identification for Footage Mapping:
To assist your team in identifying me, I was wearing [describe clothing, e.g., a navy blue coat and glasses] and was sitting in the [e.g., lower deck, near the front].
[Optional: Remove if not applicable]
I was travelling in a wheelchair and was located in the [e.g., designated wheelchair space].
I look forward to your confirmation that this footage has been located and preserved.
Yours sincerely
[Your Full Name]
[Your Phone Number]
For incidents on the railway, including the London Underground, regional rail services, trams, and metro systems such as the Tyne and Wear Metro or the Glasgow Subway, footage is usually held slightly longer, often between 21 and 30 days. Use this version to include specific details like the rolling stock or unit number, which can usually be found on the front or side of the train or tram carriages. If you are unsure who is responsible, such as an incident involving a train operating company like Thameslink on Network Rail property, you should include the Data Protection Officers of both organisations in your request to ensure the footage is preserved.
To: Email address of Data Protection Officer of [Train Company or Transport Authority
Subject: URGENT: Subject Access Request – Video Footage – [Date] – [Service/Station]
Dear Data Protection Officer,
I am writing to make a formal Subject Access Request under the UK GDPR and the Data Protection Act 2018.
I require access to CCTV and/or Body Worn Video (BWV) footage involving myself during an incident on your [network/service]. As I am aware that digital surveillance footage and bodycam recordings are typically overwritten within a short period (often 14 to 31 days), please treat this as an urgent request to preserve the data immediately.
Incident Details:
Date: [Insert Date]
Time: [Insert Approximate Time, e.g. 17:30 to 18:00]
Location: [e.g. Onboard the train / On the platform at [Station Name]]
Train Rolling Stock / Unit Number: [Insert Number if known, otherwise state "N/A - Station Incident"]
Service Details: [e.g. The 17:45 service from [Station A] towards [Station B]]
Description of Incident / Missing Item:
[Briefly describe what happened, e.g. "I left a personal item on the train" or "I was involved in an incident on the platform"].
[OPTIONAL SECTION: Include if a crime was committed]
Crime Prevention & Law Enforcement Disclosure:
I am a [victim/witness] of a crime (e.g. theft of a smartphone, robbery, or harassment) that occurred during this journey. I am making this request in accordance with Schedule 2, Part 1, Paragraph 2 of the Data Protection Act 2018, which allows for the disclosure of data for the prevention or detection of crime.
Crime Reference Number: [Insert CRN]
If you are unable to release this footage directly to me, please confirm that you have successfully locked and preserved the data and will make it available to the police upon their formal request.
Identification for Footage Mapping:
To assist your team in identifying me, I was wearing [describe clothing, e.g. a dark coat and carrying a laptop bag].
[Optional: Remove if not applicable]
I was travelling in a wheelchair and was located in the [e.g., designated wheelchair space / accessible carriage].
I look forward to your confirmation that the footage has been located and secured.
Yours faithfully
[Your Full Name]
[Your Phone Number]
Railway Specific Considerations:
Retention Periods: While station CCTV is often kept for 31 days, onboard train footage and bodycam recordings are frequently overwritten much sooner, sometimes in as little as 14 days.
Bodycam Specifics: For TfL services (like the Elizabeth Line or Overground), non-incident bodycam footage may be deleted after two weeks unless specifically tagged for an investigation.
Station vs. Train: If the incident happened at a major London station, you may need to contact Network Rail. For incidents on the train itself, contact the Train Operating Company directly.
If the operator replies stating they cannot release the footage to you directly due to privacy or redaction policies, you can use the following "Neutrality" approach to ensure the data is at least secured.
Copy and paste this response:
I understand. Please confirm that the relevant footage has now been successfully locked and preserved so that it is not overwritten or deleted. I will provide the investigating police officer's details shortly to facilitate a direct transfer of the data.
Escalating your request
Under the UK GDPR, organisations are legally required to respond to a Subject Access Request within one month. If the transport operator ignores your request, provides an incomplete response, or refuses to help without a valid legal reason, you should take the following steps:
Make a Formal Complaint: Contact the operator’s Data Protection Officer again to file a formal internal complaint. State clearly that they are failing to meet their statutory obligations under the Data Protection Act 2018.
Report to the ICO: If you are still unsatisfied after an internal complaint, or if they fail to respond, you can lodge a report with the Information Commissioner’s Office (ICO). The ICO is the UK’s independent regulator for data protection. Mentioning your intent to escalate the matter to the ICO in your follow-up emails often encourages companies to take your request more seriously.
Contact your local MP: If you are facing significant delays or "red tape" from a bus or train operating company or a public transport authority (such as TfL), you can contact your local MP. They can often write a letter on your behalf to the Chief Executive of the transport body. This is known as "casework" and can be very effective at getting a faster, more personal response from a company that is otherwise ignoring you. You can find out who your MP is and how to email them by entering your postcode at WriteToThem.com.
Disclaimer
This directory is provided for informational purposes only to assist with Subject Access Requests under UK GDPR. The information contained herein is compiled from publicly available sources and official corporate websites. While every effort has been made to ensure accuracy as of September 2025 (when this information was first compiled and shared on social media), contact details and retention policies may change without notice.
The author accepts no responsibility or liability for any inaccuracies, the failure of an operator to respond, or the loss of CCTV footage. Users should verify details on official websites before sharing sensitive identification.
This resource is independent and has no official affiliation with, or endorsement from, Transport for London or any transport operator.
Please note that these templates are provided for informational purposes only and do not constitute legal advice. While every effort is made to ensure the accuracy of the information provided, data retention policies and legal requirements can change. Using these templates does not guarantee that footage will be recovered or released, as transport operators must balance your request against the privacy rights of other individuals under the UK GDPR. It is your responsibility to ensure the information you provide is accurate and to follow up with the relevant authorities, such as the police, to ensure any preserved evidence is used appropriately in a legal investigation.
I would like to extend an invite for you to follow me on X (formerly Twitter) for transport-related updates. You can find me by searching for @CLondoner92 or by clicking on the direct link to my X page here. I am also present on BlueSky and Mastodon. I look forward to connecting with you on these platforms. Thank you for your support.
