PDCOB 16.10 Specific record-keeping requirements: data protection impact assessments
PDCOB 16.10.1R
1Where a firm completes, or updates, a data protection impact assessment in relation to its pensions dashboard platform, it must keep a record of that assessment.
PDCOB 16.10.2R
1Where a firm decides not to complete a data protection impact assessment in relation to its pensions dashboard platform, it must make a record of its reasons for not completing the assessment and retain that record.