I understand that staff access to removable media has already been disabled. Desktop PCs and laptops in HMRC are no longer able to read CDs, floppy disks, USB storage and other memory card devices. This facility can only be re-enabled with the authorisation of a director or the senior member of staff responsible for data transfer in the appropriate business area.
On 20 November, the Chancellor announced an independent review of HMRC's data handling procedures to be conducted by Kieran Poynter, the chair of PricewaterhouseCoopers.