Kris Weber
Kris is an all-round pensions lawyer with long-standing experience of advising pension trustees and sponsoring employers on all aspects of retirement benefit provision for current staff and other scheme members. His expertise ranges from establishment to wind-up of schemes via all points in between.
Kris’s particular interests include ‘scheme change’, liability management, and discrimination-related issues. His current work includes a number of buy-in contracts for trustees, advising both on benefit specifications and negotiating the wider contractual terms. Kris also has considerable experience of advising employers in industry-wide schemes relating to the UK’s former nationalised industries.
Kris has been individually ranked in the legal directories on a regular basis since 2003. He has served on the Main Committee of the Association of Pension Lawyers (including a four-year term as Secretary) and on the Legislation Committee of the Society of Pension Professionals.
Kris is also the author of the Scheme Funding, Surpluses and Deficits chapters in Tolley’s Pensions Law.
Practice Area
Panel
- Contributing Author
1 Contributions by Kris Weber
PRACTICE NOTES
UK data protection for pensions lawyers: applying the UK GDPR, DPA 2018 and DUAA 2025: lawful bases, special category data, DSARs, accountability, international transfers and enforcement.
This Practice Note sets out a concise summary of the principal core elements and obligations within the UK data protection regulatory framework and flags matters of particular significance and interest for pension lawyers. For guidance on recurring questions about applying data protection duties in a pensions setting, see Practice Note: Data protection—FAQs for pensions.
The UK’s data protection regime
Up to 24 May 2018, the United Kingdom’s data protection landscape was regulated by the Data Protection Act 1998 (DPA 1998). From 25 May 2018 until Implementation Period (or IP) completion day (11pm on 31 December 2020), the point at which the UK exited the European Union, the UK operated under the regime established by the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR). The EU GDPR brought a suite of reforms to the earlier regime, including fresh and broadened rights for data subjects, a revised benchmark for consent, further responsibilities and potential liabilities for data controllers and data processors, and enhanced powers for supervisory authorities. The EU GDPR continues to apply across the European Economic Area (EEA) after IP completion day, but no longer applies in the UK. In the UK, the EU GDPR was superseded on IP completion...
Pensions
If you expected to see yourself on this page, click here.
