For the year April 2006 to March 2007 HMRC handled approximately 300 million pieces of outgoing post at a cost of around £79 million.
The cost of sending letters to the families affected by the recent loss of data by HMRC is estimated at £2.25 million including postage costs.
The Poynter Review will interview a range of relevant parties over the course of its work.
No Government officials are working directly on the review.
HMRC is currently assessing the costs of delivering longer term solutions.
On 20 November 2007 the Chancellor announced an independent review of HMRC's data handling procedures to be conducted by Kieran Poynter, the Chair of PricewaterhouseCoopers.
The interim report was published on 17 December 2007 and is available in the Library of the House.
HMRC protects its information by requiring bodies receiving data to seek HMRC consent before it may be used for certain purposes, or disclosed further. Controls may also be set out in memorandums of understanding, partnership agreements or other documents, defining the relationship between HMRC and the body receiving the data, including the specific procedures and protocols governing the use of information.
Once data has left HMRC it is the responsibility of the receiving body, including the Student Loans Company or National Audit Office, to ensure that any further use complies with the law including the Data Protection Act 1998 and the Human Rights Act 1998.