7 Days is a weekly round up of developments in pensions, normally published on Monday afternoons. We collate this information from key industry sources, such as the DWP, HMRC and TPR.

In this 7 Days

TPR blog on systemic risk

On 31 July 2025, TPR published a blog on why managing systemic risk is a “core part of effective  trusteeship”. Trustees should ensure decisions are “long-term, well-evidenced and subject to appropriate challenge” and “not just comply” but lead by:

TPO corporate strategy and corporate plan

TPO published its corporate strategy for 2025 to 28 and corporate plan for 2025/26 on 30 July 2025. This follows on from the publication of its annual report and accounts, which revealed TPO is closing “more cases than ever before”. These publications set out a “clear vision” for TPO as it tackles “unprecedented demand” for its services including focusing on its two goals of providing an efficient, accessible and quality service, and being an “authoritative voice” for improvement in the pensions industry.

PASA data guidance

On 4 August 2025, PASA published new guidance which provides “ practical, accessible” advice on improving data security and governance. The guidance offers a toolkit for strengthening data management at a time of “growing digital risk”.

The guidance suggests practical actions on:

  • vetting and monitoring third-party providers
  • conducting regular security reviews and incorporating them into ESOG/ORA frameworks
  • developing incident response plans and data communication strategies, and
  • preparing for risks related to emerging technologies, such as AI.

PPF 2025/26 levy invoices postponed

On 31 July 2025, the PPF announced that it will be putting 2025/26 PPF levy invoicing “on hold” and  expects to provide a further update “this Autumn”. The Pension Schemes Bill includes provisions which would remove current restrictions preventing the PPF from calculating a zero levy if appropriate. The PPF is planning to monitor the Bill’s progress before making a final decision on the 2025/26 levy.

ICO guidance on disclosure of documents

The ICO released new guidance on 31 July 2025 to help organisations disclose documents to the public securely. The guidance includes practical steps and how-to videos to help organisations understand how to check documents for hidden personal information to reduce the risk of data breaches. The guidance should help organisations avoid accidental data breaches in any situation when they are disclosing or sharing documents, not just when disclosing to the public.