Jurisdiction(s):
United Kingdom

Related legal acts

Key definition

Data protection definition

What does Data protection mean? In legal practice, data protection describes the rules governing how organisations collect, use, share, retain and secure personal data, including employees’ information. In the UK this regime is set by the UK GDPR and the Data Protection Act 2018; in Ireland by the EU GDPR and the Data Protection Act 2018 (Ireland). The label is descriptive; core concepts (personal data, controller, processor, special category data) and obligations are defined in legislation. In employment, the employer is typically the controller and must identify a lawful basis (for example, contract, legal obligation or legitimate interests) and, for special category data,...

UK data protection for pensions lawyers: applying the UK GDPR, DPA 2018 and DUAA 2025: lawful bases, special category data, DSARs, accountability, international transfers and enforcement.

Published by a LexisNexis Pensions expert

Practice notes

This Practice Note sets out a concise summary of the principal core elements and obligations within the UK Data protection regulatory framework and flags matters of particular significance and interest for pension lawyers. For guidance on recurring questions about applying data protection duties in a pensions setting, see Practice Note: Data protection—FAQs for pensions.

The UK’s data protection regime

Up to 24 May 2018, the United Kingdom’s data protection landscape was regulated by the Data Protection Act 1998 (DPA 1998). From 25 May 2018 until Implementation Period (or IP) completion day (11pm on 31 December 2020), the point at which the UK exited the European Union, the UK operated under the regime established by the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR). The EU GDPR brought a suite of reforms to the earlier regime, including fresh and broadened rights for data subjects, a revised benchmark for consent, further responsibilities and potential liabilities for data controllers and data processors, and enhanced powers for supervisory authorities. The EU GDPR continues to apply across the European Economic Area (EEA) after IP completion day, but no longer applies in the UK. In the UK, the EU GDPR was superseded on IP completion...

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Danyal Enver

Arc Pensions Law LLP

Danyal joined Arc Pensions Law in 2019 as a newly qualified solicitor. He has gained experience acting for trustees and employers on a wide range of pensions legal work.On the trustee side, Danyal has advised on governance, compliance and drafting issues, including bulk annuity project work, GMP conversion and winding-up requirements. He has also acted as an officer of a trustee company. On the employer side, he has worked on corporate transactions and other commercial advisory issues.Danyal is a member of the Education & Seminars Sub-committee of the Association of Pension Lawyers and the Events Sub-committee of NextGen....

Kris Weber

Arc Pensions Law LLP

Kris is an all-round pensions lawyer with long-standing experience of advising pension trustees and sponsoring employers on all aspects of retirement benefit provision for current staff and other scheme members. His expertise ranges from establishment to wind-up of schemes via all points in between.Kris’s particular interests include ‘scheme change’, liability management, and discrimination-related issues. His current work includes a number of buy-in contracts for trustees, advising both on benefit specifications and negotiating the wider contractual terms. Kris also has considerable experience of advising employers in industry-wide schemes relating to the UK’s former nationalised industries.Kris has been individually ranked in the legal directories on a regular basis since 2003. He has served on the Main Committee of the Association of Pension Lawyers (including a four-year term as Secretary) and on the Legislation Committee of the Society of Pension...

Web page updated on 22/05/2026

Popular documents

Using the Judicial College Guidelines to assess general damages in personal injury claims

When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...

Tomlin orders in England and Wales: CPR guidance on drafting, confidentiality, approval, variation, enforcement, limitation, CCA issues, court-specific requirements, sample wording and precedents

This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...

Precedent: Deed of Surrender of Lease with Optional Premium, Settlement and Release, Landlord, Mortgagee and Guarantor Consents, Reimbursement and HM Land Registry Provisions (England and Wales)

Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...

Precedent Statutory Declaration: Standard Wording under the Statutory Declarations Act 1835

I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...