What does HMRC do with the information it holds about you?
29 May 2018
HMRC has updated its private notice detailing how it collects and uses personal information about you. The update is in accordance with data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.
HMRC is a data controller. This means that it is responsible for deciding how it holds and uses personal information about you. In certain circumstances, when HMRC delivers services in partnership with another public authority, HMRC will be a joint data controller with that public authority.
HMRC is a statutory body with statutory functions and a statutory duty of confidentiality which are set out in legislation in the Commissioners for Revenue and Customs Act 2005. HMRC will only share your information with third parties where it is legally allowed to do so.
Information in the Notice includes:
- The kind of information held about you
- How your personal information is collected
- How your information is used, including particularly sensitive personal information
- Rights of access, correction, erasure, and restriction
- Right to withdraw consent
- Information about criminal convictions
- Automated decision-making
HMRC Privacy Notice - updated on 23 May 2018