[holding answer 27 November 2007]: Since April 2005, HMRC has discussed eight data security incidents involving customer information with the Information Commissioner’s Office as a matter of good practice and to ensure appropriate lessons are learned from such incidents.