Once you’ve provided us with your employee data, B&CE also becomes responsible for ensuring this data is compliant with GDPR. We become joint ‘data controllers’ (see What’s a data controller and data processor? for more info).
You’ll still remain responsible for your employee data in terms of their employment with you. B&CE, along with the Trustees of The People’s Pension, will become responsible for how that data is protected in relation to your pension scheme.
Lots of businesses, especially the smaller ones, are struggling with what GDPR means for them.
There is a common misunderstanding that B&CE is a ‘data processor’ for employers using The People’s Pension. But actually, B&CE is a data controller in its own right. As joint data controllers, both B&CE and the employer have full responsibility for the compliance and accountability of the data collected and used. This means that you don’t need to set up a controller/processor agreement with us in relation to the employee data you provide us.
To help us, please make sure that the employee data you provide is accurate and up-to-date.
For more information see What is GDPR?