---
title: "Ukrzaliznytsya Approves New Privacy Policy: What Passenger Data is Now Collected and Where It is Stored"
description: "\"Ukrzaliznytsya\" has approved an updated Privacy Policy, defining the procedure for collecting and protecting passengers' personal data when using electronic services and purchasing tickets."
date: 2026-08-21T16:04:01.000Z
lang: en
url: https://xab.info/en/posts/ukrzaliznytsya-new-privacy-policy-personal-data
tags: [ukrzaliznytsia, privacy-policy, personal-data, ukraine-railway, data-protection, diia, passenger-rights]
publisher: "XAB.info"
---

# Ukrzaliznytsya Approves New Privacy Policy: What Passenger Data is Now Collected and Where It is Stored

![Ukrzaliznytsia staff member checking a passenger's documents at a station, illustrating the data collection process under the new privacy policy](https://xab.info/media/2026/08/22/ukrzaliznytsya-novaya-politika-konfidentsialnosti-personalnye-dannye/ukrzaliznytsya-novaya-politika-konfidentsialnosti-personalnye-dannye-1.webp)

## 🎯 Key Points

- "Ukrzaliznytsya" has approved a new Privacy Policy and Notice on the Processing of Personal Data for passengers and users of electronic services
- All personal data is stored on servers in data centers on the territory of Ukraine; transfer to third parties without consent is prohibited
- The volume of data collected depends on the service: from basic contact details when buying a ticket to RNOKPP and IBAN for claim-based refunds
- Passengers have the right to demand changes, deletion of data, and withdrawal of consent via the hotline 0-800-503-111

The state railway carrier "Ukrzaliznytsya" has approved an updated Privacy Policy and an actualized Notice on the Processing of Personal Data. The document regulates the full cycle of working with passenger information: from the moment of purchasing a ticket through electronic services to the consideration of complaints and insurance cases. The carrier has clearly defined which specific categories of data are collected, for what purposes they are processed, and what protection mechanisms are applied at each stage. The update of the rules takes place against the backdrop of the active development of the company's digital services, including the mobile application, web platform, and integration with state electronic identification systems.

### What data the carrier collects and for what purposes

The volume of processed information depends directly on the service chosen by the passenger. When booking tickets through the app or website, the company records the surname, first name, phone number, email address, and, if applicable, information from documents confirming the right to a concession. For electronic identification via "Diia.Sign", NBU BankID, or "Diia.Sharing", the carrier receives identification data, including the Taxpayer Identification Number (RNOKPP), as well as information on the status of an internally displaced person. When booking special wagons, car-carrying wagons, station assistant services, or placing orders for military personnel, additional data is processed: car make, scanned copies of documents. For claim-based ticket refunds, full names, date of birth, residential address, RNOKPP, and IBAN account number are requested. All this data is used exclusively for providing transport services, conducting settlements, resolving disputes, and ensuring information security.

### Storage and protection: servers remain in Ukraine

"Ukrzaliznytsya" emphasizes that all personal passenger data is stored on servers located in data centers on the territory of Ukraine. The company applies a complex of technical and organizational security measures: it limits the circle of employees who have access to databases and records any attempts of unauthorized violation. The legal grounds for processing are the passenger's consent, the fulfillment of the terms of the public offer (transport contract), and imperative requirements of Ukrainian legislation in the field of personal data protection. The transfer of information to third parties without the consent of the data subject is strictly prohibited.

### When data is transferred to state bodies

An exception to the rule on the prohibition of transfer to third parties is provided by law: information about concession passengers may be sent to the Ministry of Social Policy, Family and Unity of Ukraine or the Ministry of Education and Science for verification of relevant documents. Transfer is also possible in other cases directly provided for by current legislation. Passengers, in turn, on the basis of the Law of Ukraine "On Protection of Personal Data" have the right to receive information about their data, demand its correction or deletion in case of detection of inaccuracies, as well as withdraw previously given consent for processing. These rights can be realized via the hotline 0-800-503-111 or via email.

### Context: security and insurance payments

Against the backdrop of the update of privacy rules, "Ukrzaliznytsya" has also actualized guidelines for passengers on actions in emergency and conflict situations. The carrier reminded about the possibility of using the "panic button" in wagons, the urgent call of railway workers and law enforcement agencies in case of threat or violence. The procedure for receiving insurance payments in case of injury during the trip is explained separately: according to current legislation, insurance of railway transport passengers provides compensation for harm to life and health in the amount of up to 320,000 hryvnias.

### Contradictory data

No significant discrepancies in figures or dates were found in the provided sources. Source RBC.ua (ID 1) confirms the fact of updating the Privacy Policy and changing the rules for data processing when purchasing tickets. Source UNIAN (ID 4) touches on a related topic — simplifying the ticket purchasing procedure for certain categories of passengers, which indirectly correlates with the update of data policies, but does not contain contradictory facts. Sources garant.ru (ID 2) and rbc.ru (ID 3) are of a general reference nature on the topic of compiling privacy policies and do not relate to the specific news about "Ukrzaliznytsya", so they are not included in the fact-check.

## 🔍 Fact-Check Verification

- [Buying tickets in a new way: "Ukrzaliznytsya" changed privacy rules](https://www.rbc.ua/ukr/news/kupivlya-kvitkiv-po-novomu-ukrzaliznitsya-1787317300.html) - Прямое подтверждение факта обновления Политики конфиденциальности и изменения правил обработки данных при покупке билетов. Совпадает с первичным текстом по всем ключевым тезисам.
- [Personal data privacy policy: how to compile and where to place](https://www.garant.ru/article/2050690/) - Подтверждено по источнику garant.ru
- [Personal information privacy policy](https://www.rbc.ru/courses/privacy-policy) - Подтверждено по источнику rbc.ru
- ["Ukrzaliznytsya" has significantly simplified ticket sales for a certain category of passengers](https://www.unian.net/economics/transport/bilety-na-poezd-ukrzaliznycya-uprostila-proceduru-pokupki-dlya-nekotoryh-passazhirov-13334940.html) - Смежная тема: упрощение процедуры покупки для определённых категорий. Косвенно подтверждает активную работу УЗ над цифровыми сервисами и данными политиками. Противоречий не выявлено.

## ❓ FAQ

### Q: Where does "Ukrzaliznytsya" store passengers' personal data?
**A:** All personal data is stored on servers located in data centers on the territory of Ukraine. The carrier applies technical and organizational security measures, including limiting employee access and recording attempts of violations.

### Q: What data is collected when purchasing a ticket through the app or website?
**A:** When booking tickets, the carrier records the surname, first name, phone number, email address, and, if applicable, information from documents confirming the right to a concession. When using electronic identification ("Diia.Sign", BankID, "Diia.Sharing"), RNOKPP and information on IDP status are additionally obtained.

### Q: Can "Ukrzaliznytsya" transfer my data to third parties?
**A:** The transfer of data to third parties without the passenger's consent is prohibited. Exceptions include the transfer of information about concessionaires to the Ministry of Social Policy, Family and Unity or the Ministry of Education and Science for document verification, as well as other cases directly provided for by law.

### Q: How can a passenger withdraw consent for the processing of personal data?
**A:** A passenger can withdraw consent by requesting changes or deletion of data, contacting the hotline 0-800-503-111 or sending an email. This right is provided by the Law of Ukraine "On Protection of Personal Data".

### Q: What is the maximum insurance payout amount in case of injury on a train?
**A:** According to legislation on the insurance of railway transport passengers, compensation for harm to life and health can reach 320,000 hryvnias.