[UK] HMRC’s Privacy Notice

[UK] HMRC’s Privacy Notice
13 May 2019

The Data Protection Act 2018 requires organisations who process personal data to meet certain legal obligations contained within the Data Protection principles.

HMRC is a data controller within the meaning of the act and process large volumes of personal data.

Therefore, HMRC’s “privacy statement” is an interesting read as it contains information on how HMRC collect and use personal information about you in accordance with data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.  This includes information on:

  • The Data protection principles
  • The kind of information HMRC hold
  • How personal information is collected
  • How personal and sensitive personal information is used
  • How data is shared
  • Data security and
  • Data retention

With regards data retention, this is one of the most common questions that the Global Payroll Association receives from members.  So as well as the above privacy notice, it is really worthwhile professions looking at HMRC’s data retention policy contained in their policy paper“Records Management and Retention and Disposal Policy”.

 

The Data Protection Act 2018 requires organisations who process personal data to meet certain legal obligations contained within the Data Protection principles.

HMRC is a data controller within the meaning of the act and process large volumes of personal data.

Therefore, HMRC’s “privacy statement” is an interesting read as it contains information on how HMRC collect and use personal information about you in accordance with data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.  This includes information on:

  • The Data protection principles
  • The kind of information HMRC hold
  • How personal information is collected
  • How personal and sensitive personal information is used
  • How data is shared
  • Data security and
  • Data retention

With regards data retention, this is one of the most common questions that the Global Payroll Association receives from members.  So as well as the above privacy notice, it is really worthwhile professions looking at HMRC’s data retention policy contained in their policy paper“Records Management and Retention and Disposal Policy”.