The Financial Services and Markets Act 2000 is amended as follows.
After section 137FA insert—
The FCA must make general rules imposing requirements on specified authorised persons with respect to— providing pensions information by means of— a qualifying pensions dashboard service; the pensions dashboard service provided by the Money and Pensions Service; facilitating the provision of pensions information by means of— a qualifying pensions dashboard service; the pensions dashboard service provided by the Money and Pensions Service. In this section “pensions information” means, in relation to a personal or stakeholder pension scheme, information of a description specified in rules made by virtue of subsection (1), which may include in particular— information relating to— the constitution of the scheme, the administration and finances of the scheme, the rights and obligations that arise or may arise under the scheme, the pensions and other benefits an entitlement to which would be likely to accrue to a member, or be capable of being secured by a member, in respect of the rights that may arise under the scheme, and other matters relevant to personal or stakeholder pension schemes in general or to personal or stakeholder pension schemes of a description to which the scheme belongs; information as regards the position of an individual in relation to the scheme. Rules made by virtue of subsection (1) may, in particular, impose requirements about— the persons to whom pensions information must be provided; the circumstances in which pensions information must be provided; the steps to be taken before pensions information may be provided; the manner and form in which pensions information must be provided; the time within which pensions information must be provided; the way in which pensions information must be held. Rules made by virtue of subsection (1) may require specified authorised persons to comply with standards, specifications or technical requirements published from time to time by— the Secretary of State, the Money and Pensions Service, or a person specified or of a description specified in the rules. Rules made by virtue of subsection (1) may include provision under which a determination may fall to be made by— the Secretary of State, the Money and Pensions Service, or a person specified or of a description specified in the rules. Rules made by virtue of subsection (1) may require specified authorised persons to provide information specified in the rules about their carrying out of requirements specified in the rules to— the FCA, the Money and Pensions Service, or a person specified or of a description specified in the rules. Rules made by virtue of subsection (1) may require specified authorised persons to have regard, in complying with requirements specified in the rules, to guidance issued from time to time by a person specified or of a description specified in the rules. In determining what provision to include in the rules, the FCA must have regard to any regulations that are for the time being in force under— section 238D of the Pensions Act 2004, or Article 215D of the Pensions (Northern Ireland) Order 2005 (S.I. 2005/255 (N.I. 1)). General rules made by virtue of section 137FAA(1) may make provision about— how pensions information is to be provided, including provision about the use of intermediaries; the involvement of specified authorised persons in the arrangements for dealing with requests for information about pensions. The provision made by virtue of subsection (1) may, in particular, require— the use of electronic communications; the use of facilities or services specified or of a description specified in the rules; the provision of assistance in connection with the establishment, maintenance or management of such facilities or services; participation in, or compliance with, arrangements for establishing, maintaining or managing such facilities or services. The facilities and services for which provision may be made by virtue of subsection (2)(b) may include facilities or services with functions relating to— the transmission of information, verifying the identity of a person, identifying the occupational or personal pension scheme or schemes (as defined in section 1 of the Pension Schemes Act 1993 or the Pension Schemes (Northern Ireland) Act 1993) under which pensions are payable to or in respect of a particular individual, authenticating information transmitted by means of electronic communications, or ensuring the security of information transmitted by means of electronic communications. Rules made by virtue of subsection (2)(b) may impose requirements as regards a facility or service, including requirements about— compliance with standards, specifications or technical requirements published from time to time by— the Secretary of State, the Money and Pensions Service, or a person specified or of a description specified in the rules; the provider of the facility or service being a person approved from time to time by— the Secretary of State, the Money and Pensions Service, or a person specified or of a description specified in the rules. Rules made by virtue of subsection (2)(d) may, in particular, require specified authorised persons— to cooperate with the Money and Pensions Service or a person specified or of a description specified in the rules; to coordinate activities with the Money and Pensions Service or a person specified or of a description specified in the rules. Except as provided by subsection (7), general rules made by virtue of section 137FAA(1) may provide for the processing of personal data in accordance with the rules not to be in breach of— any obligation of confidence owed by the person processing the personal data, or any other restriction on the processing of personal data (however imposed). General rules made by virtue of section 137FAA(1) are not to be read as authorising or requiring such processing of personal data as would contravene the data protection legislation (but in determining whether particular processing of data would do so, take into account the power conferred or duty imposed by the provision of the rules in question). Before the FCA publishes a draft of any general rules to be made by virtue of section 137FAA, it must consult— the Secretary of State, and the Treasury. Section 137FAA is not to be treated as requiring the FCA to make general rules by virtue of section 137FAA that come into force before regulations made under section 238D of the Pensions Act 2004 come into force. Section 137FAA is not to be treated as requiring the FCA to exercise the power to make general rules by virtue of section 137FAA in relation to every case to which the power extends. A reference in sections 137FAA and 137FAB to the Money and Pensions Service includes a reference to a person with whom arrangements are made under section 5(1), (2) or (3) of the Financial Guidance and Claims Act 2018. In sections 137FAA and 137FAB— “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act); “pensions dashboard service” means— a pensions dashboard service within the meaning of section 238A of the Pensions Act 2004, or a pensions dashboard service within the meaning of Article 215A of the Pensions (Northern Ireland) Order 2005 (S.I. 2005/255 (N.I. 1)); “personal data” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act); “personal pension scheme” means a personal pension scheme within the meaning of an order under section 22 (except in section 137FAB(3)(c)); “qualifying pensions dashboard service” means a pensions dashboard service that satisfies— such requirements as may be prescribed by regulations under section 238A of the Pensions Act 2004, or such requirements as may be prescribed by regulations under Article 215A of the ; “specified authorised person” means an authorised person of a description specified in general rules made by virtue of section 137FAA; “stakeholder pension scheme” has the meaning given by— section 1 of the Welfare Reform and Pensions Act 1999, in relation to England and Wales and Scotland; Article 3 of the Welfare Reform and Pensions (Northern Ireland) Order 1999 (S.I. 1999/3147 (N.I. 11)), in relation to Northern Ireland.
In section 138F (notification of rules), in subsection (2) (rules not to be notified to the Bank of England), after “section” insert “137FAA,”.