GDPR and HMRC

[GreenMirror]

Following up on excellent suggestion from OldGreg https://forums.contractoruk.com/hmrc...ries-gdpr.html .

Any GDPR experts here who can advise me on how to get my data out of HMRC? I raised a SAR in January - not complied with. I complained to ICO - they say they will write to HMRC and keep my complaint on file.

As GDPR comes into force today I thought I would see if that helps me.

Top Level from google search. Page says it has been updated 23rd May 2018: -
https://www.gov.uk/government/public...hold-about-you

Which points to this: -
https://www.gov.uk/guidance/hmrc-subject-access-request

For income tax: -
https://www.tax.service.gov.uk/shortforms/form/DPU_SAR

Input your details including NA number and UTR(10 digits)

You get back an email with their generated ref for your request
And a link to http://www.hmrc.gov.uk/freedom/foi-01.htm
Which is a broken link!

Are HMRC allowed to do this?

[Lance]

You can do a DSAR on a paper napkin handed in to reception at any branch office. The 30 day timer starts then.

10 breaches of that 30 days is enough for the ICO to investigate.



However it’s at the ICOs discretion what happens next. I can’t see them shafting HMRC for some reason.

Anyway. Today is the day to do your DSAR. Earlier ones have less strict requirements.

[DaveB]

Following up on excellent suggestion from OldGreg https://forums.contractoruk.com/hmrc...ries-gdpr.html .

Any GDPR experts here who can advise me on how to get my data out of HMRC? I raised a SAR in January - not complied with. I complained to ICO - they say they will write to HMRC and keep my complaint on file.

As GDPR comes into force today I thought I would see if that helps me.

Top Level from google search. Page says it has been updated 23rd May 2018: -
https://www.gov.uk/government/public...hold-about-you

Which points to this: -
https://www.gov.uk/guidance/hmrc-subject-access-request

You can submit a SAR in any form you want, they have to have processes in place to recognise it and deal with it. However, they can then ask you for proof of identity etc before actually doing anything about it.

For income tax: -
https://www.tax.service.gov.uk/shortforms/form/DPU_SAR

Input your details including NA number and UTR(10 digits)

You get back an email with their generated ref for your request
And a link to http://www.hmrc.gov.uk/freedom/foi-01.htm
Which is a broken link!

Are HMRC allowed to do this?

How they handle request is up to them provided the outcome is that you get the information you asked for within the prescribed time limit. The original link was to the FOI page that is now out of data as it hasn't been updated to cover GDPR which is why it will have been archived. I'm guessing someone forgot to upload the revised version.

You can make a SAR in any form your want, HMRC must have processes in place to recognise it for what it is and respond appropriately.

Details on what constitutes a SAR and what they have to do here:https://ico.org.uk/for-organisations...ght-of-access/

[GreenMirror]

In one of my links there is this: -
https://www.gov.uk/government/public...ou#contact-dpo

I have reported the broken link to the DPO. As you say, I will have to wait a month. Hopefully they will comply now GDPR is up and going.