Help Centre for Payroll bureaux

What is GDPR?

GDPR (the General Data Protection Regulation) is an EU data protection regulation, applicable across the EU on 25 May 2018.

The UK Data Protection Bill is different to the GDPR. This will fill the gaps and permitted derogations in the GDPR such as covering data processing in law enforcement and the intelligence services. The UK Data Protection Bill will also attempt to ensure that on leaving the EU, the UK has adequate data protection provisions. This does not yet have an implementation date.

What information does GDPR apply to?

The GDPR protects personal data, which is any information from which a data subject can be identified. The GDPR also refers to special categories of personal data.

What are the principles of GDPR?

  1. Data must be processed lawfully, fairly and in a transparent manner
  2. Data must be collected for specified, explicit and legitimate purposes
  3. Data must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is collected
  4. Data must be accurate and kept up to date
  5. Data must be kept for no longer than is necessary
  6. Data must be processed in a manner that ensures appropriate security

What is NOW: Pensions doing to ensure compliance with GDPR?

NOW: Pensions takes data protection very seriously and as a result, we have an updated programme in place for GDPR.

A new version of our client participation agreement has been released which contains updated data protection provisions covering GDPR. If you are an existing client and have not received an email detailing these changes please visit

The GDPR compliant privacy policy is now on our website at This is effective from May 2018.

There is a Data Protection Notice which contains additional information and can be viewed in your Gateway account.

You can access your Gateway account by following the steps on this page

Where can I find further information?

The NOW: Pensions website will be updated as new documents are released.

For further information on GDPR please refer to the Information Commissioner’s Office at

NOW: Pensions has a good technical infrastructure combined with a pension product suitable for our team. We couldn’t be happier with NOW: Pensions.
Martin Woods,