PRACTICE NOTES
This Practice Note sets out a concise summary of the principal core elements and obligations within the UK data protection regulatory framework and flags matters of particular significance and interest for pension lawyers. For guidance on recurring questions about applying data protection duties in a pensions setting, see Practice Note: Data protection—FAQs for pensions.
The UK’s data protection regime
Up to 24 May 2018, the United Kingdom’s data protection landscape was regulated by the Data Protection Act 1998 (DPA 1998). From 25 May 2018 until Implementation Period (or IP) completion day (11pm on 31 December 2020), the point at which the UK exited the European Union, the UK operated under the regime established by the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR). The EU GDPR brought a suite of reforms to the earlier regime, including fresh and broadened rights for data
Pensions