Abstract: With the application and dissemination of emerging technologies such as mobile internet, big data, and artificial intelligence, data security issues such as privacy breaches, data trading, and network attacks are becoming increasingly prominent. This paper proposed a technology system of railway data security and privacy protection based on the complexity and particularity of railway business, analyzed the requirements and risks of railway data security and privacy protection, adopted the method of the classification and gradation of railway data and the full lifecycle data security protection, introduced data security and privacy protection technologies, as well as the application scenarios of railway data security and privacy protection technology system. The research results can provide technical support for improving railway data privacy protection and data security.