[F1Qualifying pension dashboard service: further provisionN.I.
215B.—(1) Requirements prescribed under Article 215A(2) may make provision about—
(a)dealing with requests for information about pensions, including provision about the use of intermediaries;
(b)the involvement of the provider of a pensions dashboard service in the arrangements for dealing with requests for information about pensions.
(2) Provision made by virtue of paragraph (1) may, in particular, require—
(a)the use of electronic communications;
(b)the use of facilities or services specified or of a description specified in the regulations;
(c)the provision of assistance in connection with the establishment, maintenance or management of such facilities or services;
(d)participation in, or compliance with, arrangements for establishing, maintaining or managing such facilities or services.
(3) The facilities and services for which provision may be made by virtue of paragraph (2)(b) may include facilities or services with functions relating to—
(a)the transmission of information,
(b)verifying the identity of a person,
(c)identifying the occupational or personal pension scheme or schemes under which pensions are payable to or in respect of a particular individual,
(d)authenticating information transmitted by means of electronic communications, or
(e)ensuring the security of information transmitted by means of electronic communications.
(4) Regulations under paragraph (2)(b) may impose requirements as regards a facility or service, including requirements about—
(a)compliance with standards, specifications or technical requirements published from time to time by—
(i)the Department,
(ii)the Money and Pensions Service, or
(iii)a person specified or of a description specified in the regulations;
(b)the provider of the facility or service being a person approved from time to time by—
(i)the Department,
(ii)the Money and Pensions Service, or
(iii)a person specified or of a description specified in the regulations.
(5) Regulations under paragraph (2)(d) may, in particular, require the provider of the pensions dashboard service—
(a)to cooperate with the Money and Pensions Service or a person specified or of a description specified in the regulations;
(b)to coordinate activities with the Money and Pensions Service or a person specified or of a description specified in the regulations;
(c)to enable the Money and Pensions Service or a person specified or of a description specified in the regulations to monitor or audit compliance by the provider.
(6) Except as provided by paragraph (7), regulations under Article 215A(2) may provide for the processing of personal data in accordance with the regulations not to be in breach of—
(a)any obligation of confidence owed by the person processing the personal data, or
(b)any other restriction on the processing of personal data (however imposed).
(7) Regulations under Article 215A(2) are not to be read as authorising or requiring such processing of personal data as would contravene the data protection legislation (but in determining whether particular processing of data would do so, take into account the power conferred or duty imposed by the provision of regulations in question).]
F1Arts. 215A-215C and cross-heading inserted (11.2.2021 for specified purposes) by Pension Schemes Act 2021 (c. 1), s. 131(2)(c)(3)(a), Sch. 9 para. 2