The Data Protection Act 1998 and pensions [Archived]

Produced in partnership with Pinsent Masons
Practice notes

The Data Protection Act 1998 and pensions [Archived]

Produced in partnership with Pinsent Masons

Practice notes
imgtext

Before the EU General Data protection Regulation came into force on 25 May 2018, the Data Protection Act 1998 (DPA 1998) outlined the data protection obligations for pension scheme trustees and employers when 'Processing' 'Personal data' as 'data controller' (see: Terminology below).

For more information on the data protection requirements applicable in a pensions context on and from 25 May 2018, see Practice Note: Data protection for pensions lawyers.

Terminology

Terms commonly used within the DPA 1998 included:

  1. Processing: all-encompassing term that includes obtaining, recording, holding, using, disclosing or erasing data

  2. Data subject: an individual who is the subject of the data held. Typical data subjects in a pension scheme are scheme members, and any beneficiaries or dependants of the members

  3. Personal data: data relating to a living individual who can be identified from that data

  4. Data controller: person/organisation controlling the data and responsible for complying with the provisions of the DPA 1998. For pension schemes, it was typically the trustees of an occupational pension scheme who, as data controllers,

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Data protection definition
What does Data protection mean?

In an employment context, this refers to the obligation on an employer to protect the data of its employees and ensure that it complies with the law on how it uses the employees' data.

Popular documents