This policy sets out how the Pension Protection Fund handles personal information in compliance with the Data Protection Act 1998 (the Act). We recognise the importance of the correct and lawful processing of personal data in maintaining confidence in our operations. We fully endorse and adhere to the principles set out in the Act.
The Pension Protection Fund is a data controller under the Act. It holds information for the reasons given to the Information Commissioner, and may use the information for any of those reasons.
The Pension Protection Fund has notified the Information Commissioner that we will process personal data for the following purposes:
- pensions administration
- staff administration
- accounts and records
- advertising, marketing and public relations
- assessment and collection of taxes and other revenue
- information and databank administration
The Information Commissioner describes the processing in a register which is available to the public for inspection at: http://www.ico.gov.uk
This policy applies to the handling of personal data. This is data relating to a living individual who can be identified from the data or from that data and other information which we hold or which is likely to come into our possession. It includes names and e-mail addresses of subscribers to our e-mail alert list or personal details held for the payment of compensation. It also includes any expression of opinion about an individual or any indication of our intention in respect of them. Data relates to an individual if it is information affecting their privacy, whether in their personal or family life, business or professional capacity.
Processing information fairly and lawfully
The Pension Protection Fund processes information only where:-
a) the law allows us to; or
b) you have given your consent; or
c) we have received a court order
Ensuring your personal information is safe and accurate
The Pension Protection Fund ensures that information held on our computer systems and in our paper filing systems is secure to guard against unauthorised or unlawful processing or accidental loss, destruction of, or damage to personal data. In order to carry out our purpose the Pension Protection Fund may receive information about you from others or give information to others, but we can only do this in accordance with the law. Any third parties to whom we pass personal data are also required to comply with the Act.
The Pension Protection Fund only collects and records personal information that is necessary to carry out our purpose, nothing more. The information that we record is based on fact and, where opinion is recorded, it is relevant and backed up by evidence. The Pension Protection Fund checks that the personal information being recorded is accurate.
We will only retain the information if a business need exists. It is not kept longer than is necessary for that purpose.
Asking us for the information we hold about you
Under the Act you have the right to ask to see the information which the Pension Protection Fund holds about you and why. If you want to see the information we hold about you then you must ask for the information in writing and give your full name and address. You should send your request to:
The Compliance Officer
Pension Protection Fund
12 Dingwall Road
We aim to comply with requests for access to personal data as quickly as possible. We will ensure that we deal with requests within 40 days of receipt unless there is a good reason for delay.
Normally you can see all the information we have, but there are some exceptions. These exceptions are mainly to do with the way that crime is detected or prevented, catching or prosecuting offenders and assessment taxes or duty.