Abigail Coates

Group Data Protection Officer at Department for Transport Operator

April 2025 - Present • York, United Kingdom

Group Data Protection Officer at DFTO, responsible for leading data protection strategy, governance, and compliance across all Train Operating Companies within the DFTO Group. Oversees group-wide frameworks, policy development, and regulatory engagement as the rail industry transitions toward Great British Railways.

Data Protection Officer (DPO) at London North Eastern Railway

6 years 1 mth • March 2019 - April 2025 • York, United Kingdom

As Data Protection Officer, I oversee and implement data privacy policies, procedures, and governance at LNER. I provide expert guidance to ensure we comply with regulations even as we transform digitally and adopt new tech like AI. My core duties include: Developing and implementing privacy policies, procedures, and training Monitoring compliance through risk assessments Advising on privacy obligations and requirements Handling data subject requests and complaints Serving as the point of contact for authorities Staying current on evolving laws and regulations Balancing innovation and integrity with emerging tech Championing a privacy and accountability culture With my regulatory compliance expertise and passion for data governance and privacy law, I guide our digital transformation while ensuring robust data protection and customer trust. I take pride in my ability to decode complex regulations into actionable strategies for LNER.