Summary

Mandates cryptographic hash-freezing of electronically signed pension documents so any subsequent alteration breaks the security chain, plus exhaustive audit-trail logging of signing events (IP address, timestamp, device ID, OTP logs). Aimed at eliminating pension record tampering; non-compliance attracts severe penalties including possible licence action.

Applicability

All PFAs and PFCs; IT, operations and compliance functions.