An overview of pension trustees' obligations under the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 in relation to the processing of personal data by occupational pension schemes.