7 Days is a weekly round up of developments in pensions, normally published on Monday mornings. We collate this information from key industry sources, such as the DWP, HMRC and TPR.

In this 7 Days

ICO publishes new guidance on dealing with data protection complaints

Provisions of the Data (Use and Access) Act 2025 requiring data controllers to establish processes for handling complaints from data subjects will come into force on 19 June 2026. In anticipation of these changes, the ICO has published new guidance on how to deal with data protection complaints, which explains what organisations must, should and could do to comply with the new requirements and as good practice. It follows a consultation on a draft version in August 2025, and a summary of responses has also been published.

Trustees will need to devise and record a process for handling data protection complaints ahead of the new requirements coming into force. See our Hot Topic for more details.

TPR updates DB superfunds guidance

TPR has made a small update to its guidance for those setting up and running a DB superfund. The changes relate to TPR’s specification for assumptions used for calculating minimum technical provisions (to reflect a change to the discount rate) and minor clarificatory updates.

The Pension Schemes Bill will introduce a legislative framework for superfunds, with regulations and a new TPR superfunds code expected to be in force by October 2028 at the latest. See our Alert for more details.