HMRC has an extensive programme of work to improve data security. This programme ran throughout 2008-09 and is continuing.
Key activities have included:
clarifying accountabilities for data security;
improving physical and technical controls on access to and movement of bulk data, and use of removable media; and
driving cultural change through mandatory training for all staff, improved guidance and targeted communication.