Pensions - Articles - Data breaches are frequent for pensions industry

 Sackers Senior Counsel, Arshad Khan, commented: “The pensions industry is firmly in the sights of the media and seemingly public interest too when it comes to data security. And the headlines can be emotive, giving many the impression that the industry is not on top of the situation. But the pensions industry is no different to any other industry, and breaches or cyber attacks do and will continue to happen to everyone, including schemes, such as those in our survey, and government bodies such as DWP, TPR and HMRC too. “

 Khan continued: “Headlines tend to be grabbed by breaches resulting from criminal activity, something that has become increasingly commonplace over the last year. But most breaches are down to errors, either human or systematic in origin. That is why TPR has identified that a scheme’s internal controls need to include measures to reduce cyber risk.”

 Khan concluded: “The risk of prosecution and fines from the ICO is real and they don’t need to be headline grabbing seven figure fines to cause trustees concern. The key message is to ensure that you have good scheme governance and controls in place across all aspects of data management and cyber security, in order to minimise potential damage to members and the scheme’s reputation and finances should a breach happen. This is one critical responsibility that trustees cannot delegate away!”