Richard Goldstein looks at the EU General Data Protection Regulation that comes into force in May 2018, its implications for UK occupational pension schemes, and what schemes should be doing in order to comply with it.