This note provides an overview of the cybersecurity issues in relation to occupational pension schemes. It looks at the requirements of the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the steps that trustees can take to demonstrate compliance, including the Pensions Regulator's guidance on cyber security principles for pension schemes.