Data protection for pension funds