Skip to main content

Revenue and Customs: Data Protection

Volume 470: debated on Tuesday 8 January 2008

To ask the Chancellor of the Exchequer what estimate he has made of the cost of sending letters to the families affected by the recent loss of data by HM Revenue and Customs. (169767)

For the year April 2006 to March 2007 HMRC handled approximately 300 million pieces of outgoing post at a cost of around £79 million.

The cost of sending letters to the families affected by the recent loss of data by HMRC is estimated at £2.25 million including postage costs.

To ask the Chancellor of the Exchequer whether the Poynter Review will interview Ministers in his Department as part of its work. (173350)

To ask the Chancellor of the Exchequer what staff from (a) HM Treasury, (b) HM Revenue and Customs and (c) other Government Departments are working on the Poynter Review. (173361)

To ask the Chancellor of the Exchequer what estimate he has made of the cost of (a) deploying software and (b) implementing procedures to encrypt all data sent out of HM Revenue and Customs on compact disc. (173518)

HMRC is currently assessing the costs of delivering longer term solutions.

On 20 November 2007 the Chancellor announced an independent review of HMRC's data handling procedures to be conducted by Kieran Poynter, the Chair of PricewaterhouseCoopers.

The interim report was published on 17 December 2007 and is available in the Library of the House.

To ask the Chancellor of the Exchequer what control HM Revenue and Customs (HMRC) has over the access to and use of data after it has left HMRC’s computers and been sent to (a) the Student Loans Company, (b) the National Audit Office and (c) other institutions; and what records HMRC maintains of that use and access. (175751)

HMRC protects its information by requiring bodies receiving data to seek HMRC consent before it may be used for certain purposes, or disclosed further. Controls may also be set out in memorandums of understanding, partnership agreements or other documents, defining the relationship between HMRC and the body receiving the data, including the specific procedures and protocols governing the use of information.

Once data has left HMRC it is the responsibility of the receiving body, including the Student Loans Company or National Audit Office, to ensure that any further use complies with the law including the Data Protection Act 1998 and the Human Rights Act 1998.