Parliamentary Search

Written question asked by John McDonnell (Labour) on Wednesday, 1 July 2026, in the House of Commons. It was due for an answer on Monday, 6 July 2026. It was answered by Dan Tomlinson (Labour) on Friday, 10 July 2026 on behalf of the Treasury.

Revenue and Customs: Data Protection

Question

To ask the Chancellor of the Exchequer, what steps HMRC is taking to ensure compliance with data protection requirements under the Data (Use and Access) Act 2025 relating to the processing of special category data, including data relating to health or protected characteristics.

Answer

HMRC has a comprehensive approach to data governance for compliance with requirements under the Data (Use and Access) Act 2025 and other data protection legislation. This includes, for example, requiring the legislative conditions are met for the use of special category data in any automated decisions.

HMRC has published information about its approach to Automated Decision Making as part of its privacy notice available on at, www.gov.uk, by searching for ‘HMRC Privacy Notice’.

HMRC staff are provided with policy and guidance through the internal intranet, including specific guidance on automated decision-making. Staff are also supported through data protection requirements using Data Protection Impact Assessments. HMRC has updated its policies and guidance following changes introduced by the Data (Use and Access) Act 2025.

Secondary information

Type
Written question
Reference
14768
Session
2026-27
Grouped for answer
Yes
Subjects
Data protection Revenue and Customs
Legislation
Data (Use and Access) Act 2025
Link
View this Written question on www.parliament.uk