Financial Services and Markets Act 2000 (Regulated Activities) (Amendment) Order 2024

Lord Livermore Excerpts

Tuesday 13th February 2024 Grand Committee

[Lord Sharkey (LD)]

My Lords, we support this pensions dashboard SI, just as we supported the pensions dashboards project during the passage through the House of what became the Pension Schemes Act 2021. We continue to believe that the dashboards should deliver more information to the consumer in a comprehensive and easily understood way, and that this will make it easier to make better choices.

We understand that providing these dashboards, both for MaPS and for commercial suppliers, is a very complex undertaking. We were not terribly surprised by the delays the project has suffered but we would like some reassurance about progress from the Minister. The new connection date is set for 31 October 2026, but some services may be available before then. Could the Minister tell us when we may now expect the MaPS dashboard to be available to consumers, when we may expect commercial variants to be available and what services short of a full dashboard may be available sooner?

It would also be very helpful if the Minister could tell us when she expects the FCA rules that she mentioned, which were previously consulted on, to be published. It is hard to see commercial enterprises being able to finalise their own dashboards without sight of and understanding of the new FCA rules.

During the debates in the House on what is now the Pension Schemes Act 2021, many of us thought that the MaPS version of the dashboard should be allowed at least a year of operation before commercial versions were allowed to enter the market. Can the Minister tell us whether there is likely to be a period when the MaPS version runs alone?

We also debated the issue of allowing consumers to make transactions via commercial dashboards. Can the Minister say what the current position is? Will transactions be allowed?

The mechanics of the SI before us seem entirely straightforward and are clearly vital to consumer protection. We have no issues with either its purpose or its mechanism. We do have a couple of very minor and tangential questions. First, we are curious about the date of the SI coming into force. Why is it 11 March? Does that date have any particular significance?

The second question relates to the final sentence of paragraph 7.4 of the Explanatory Memorandum, which reads:

“Operating a dashboard may include taking regulatory responsibility for any third parties involved in connecting to MaPS digital architecture on their behalf”.


I would be very grateful if the Minister could unpack that a little. Perhaps she could give an example of such an arrangement. What circumstances would trigger the assumption of responsibility?

[Lord Livermore (Lab)]

My Lords, this SI makes good on a commitment given during the passage of what became the Financial Services Act 2021 to ensure that entities running a pensions dashboard will have to be authorised and regulated by the FCA. This is an important safeguard for pension holders and we welcome the SI, even if it has taken longer than expected to arrive and is not quite the final piece of the pensions dashboard puzzle.

In an age of scams, uncertainty about AI and increasing consumer concern about online safety, perhaps I might ask the Minister about technical safeguards that providers are expected to put in place. I understand that dashboards themselves will not store data, so there is no risk of mass collection. But if an app is not secure and someone is using a device infected with malware, for example, could bad actors still be able to view and therefore exploit data such as account names, numbers and balances? It would be helpful to know what specifications private providers will have to meet—or, indeed, whether the Government or the FCA will be setting any technology specifications at all.

Paragraph 7.1 of the Explanatory Memorandum to this SI states that the regulated entity will be responsible for the actions of third parties connecting to the Money and Pensions Service digital architecture on their behalf. In recent years, there has been a number of examples of websites or apps using plug-ins to process logins which it then turned out had been infiltrated and customer data breached. Are the Government satisfied that the FCA and dashboard providers will be on top of these issues and that they will go to the Information Commissioner if needed?

Although more guidance is being issued about pensions dashboards, it is still not clear when the Government expect the first products to be operational. Does the Minister have a specific target date in mind?

Finally, when this SI was debated in the Commons, the shadow Economic Secretary asked the Minister whether he could confirm whether pensions dashboards would be using the Government’s OneLogin service. The Economic Secretary said he would write on the matter but, as far as I am aware, has not yet done so. Does the noble Baroness have an answer to that point in her brief and, if not, whether she will commit to copying the Economic Secretary’s reply, when it comes, to the participants in this debate today?

[Baroness Vere of Norbiton (Con)]

My Lords, I am very grateful to both noble Lords for their contributions to this short debate on a topic of great interest to all of us pensioners. I, for one, am looking forward to being able to see whether I have any lost pensions that suddenly pop up on my dashboard and it turns out that I am a multimillionaire. I am not holding my breath.

However, I think all noble Lords recognise that it is an incredibly complex undertaking, and it is right that we take the time to ensure that it is done to the level that consumers will expect—particularly given the amount of data available out there relating to pensions. It must be safe and secure; pensions dashboards will allow users to search their pensions and view their data, and they will be connecting to potentially thousands of schemes offered by technologically advanced organisations in some circumstances, and in others, frankly, organisations that are not quite so advanced. It is those laggards that we need to make sure are up to scratch.

Essentially, we expect the digital architecture to facilitate the search of more than 71 million pensions records held by thousands of pension schemes and providers. Each of those—or many of them—will have different IT systems and ways of calculating values. Pulling all of that together is the complex thing behind this, but, as the noble Lord, Lord Livermore, rightly pointed out, we also have the issue of identity verification to consider, and various other critical elements of the ecosystem. Around that sit things such as standards and guidance to pension schemes, in order for them to be able to connect.

The timelines at the moment are that the DWP’s amending regulations came into force in August 2023. That set out a new connection deadline for schemes of October 2026. At the moment the DWP is engaging extensively with industry and has been since last year. It will issue guidance on a connection timetable in spring 2024.

The reason for the delay is that it is a slightly more complex technical issue and solution than initially anticipated. This became apparent once we were able to speak to industry stakeholders to find out how they store their data and present it to their pension holders. But I am convinced there will be a point when we get to the dashboard available point—DAP—at which stage the dashboard will be made publicly available. However, before the DAP can be reached, the Secretary of State for the Department for Work and Pensions will have to issue a notice. He or she will do so only after having regard to whether there is sufficient coverage on the dashboards, that the service is working effectively and that the overall user journey on the dashboard is positive. This will be informed by extensive user testing to ensure the success of the pensions dashboards services from the outset.

I think that it was the noble Lord, Lord Livermore—forgive me, I cannot remember—who asked whether MaPS would be first and then others would follow. In fact, it was the noble Lord, Lord Sharkey. It is too early to say now. Certainly, MaPS will be first, but we are not yet clear whether there will be other private sector providers ready to go at that time. There will not be a rush to try to get private sector providers there because, of course, the FCA is still working on its rules, and we will allow private sector providers only once the FCA has published its final rules. The applicants would need time to prepare accordingly, the dashboard architecture would need to be complete and the private operators would then have to have applied to the FCA, which would have gone away, checked the business model and looked at its usability—all of those things—before it would also be allowed to sit alongside MaPS. So it is too early to say whether a private sector provider would be launched at the same time.