Data protection

Data protection

Data protection regime since 25 May 2018

The data protection regime introduced by the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) came into force on 25 May 2018 and applied in the UK until IP completion day (11 pm on 31 December 2020). The EU GDPR introduced a raft of changes to the previous data protection regime, including new and extended data subject rights, a new standard for consent, additional obligations and liabilities for data controllers and data processors, and extended powers for supervisory authorities. The EU GDPR continues to apply in the European Economic Area (EEA) beyond IP completion day, but not in the UK.

In the UK, the EU GDPR was replaced on IP completion day by the UK GDPR regime. The UK GDPR regime uses, as its starting point, two key pieces of legislation:

•
a version of the EU GDPR which was incorporated into UK law (with various amendments made by Brexit legislation) on IP completion day (Assimilated Regulation (EU) 2016/679, the UK GDPR)
•
the parts of the Data Protection Act 2018 (DPA 2018) that relate

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Pensions News

PensionsEurope warns US Senate about pension fund tax changes in new Bill

PensionsEurope sent a letter to the US Senate on 16 June 2025 expressing concerns about section 899 of the One Big Beautiful Bill Act. This follows the approval of the Bill by the US House of Representatives on 22 May 2025. This section, which will be added to the US Internal Revenue Code, aims to raise net income and withholding tax rates on US-source income earned by non-US individuals classified as ‘applicable persons’—a group that includes pension funds. As this change poses significant risks to European pension funds’ investments in the US, and with the US Senate scheduled to vote on the Bill on 23 June 2025, PensionsEurope is actively collaborating with the World Pension Alliance and other workplace pension organisations to address the issue.

Survey finds over one million gig workers ‘can’t afford’ to save for a pension

Law360: More than a million 'gig' workers in the UK cannot afford to save into a pension, a retirement savings company has said, amid growing fears that younger and more precarious workers will not have adequate savings in later life.

DWP announces appointment of Deborah Evans as new chair of TPO

The Department for Work and Pensions (DWP) has announced the appointment of Deborah Evans as the new chair of The Pensions Ombudsman (TPO), effective from 1 July 2025, for a five-year term. Evans, who currently serves as a non-executive director and chair of TPO’s compliance committee, will take over from Anthony Arter, who has been interim chair since January 2024. The appointment was made by the Secretary of State following an open competition regulated by the Office for the Commissioner of Public Appointments. As chair, Evans will receive £24,000 per year for a minimum time commitment of 36 days annually. The announcement comes as the government’s Pension Schemes Bill continues its passage through Parliament, with proposed measures to strengthen the legal standing of TPO and improve the resolution of pension overpayment cases.

Government urged to fix civil service pension administration failures

Law360: The government has not effectively held to account the administrator of the £189bn Civil Service pension scheme for failing to meet historic performance targets, the National Audit Office (NAO) has said, urging policy makers to learn from the failures.