Data Protection Act - information HM Revenue and Customs hold about you

Find out about HM Revenue and Customs (HMRC) data protection policy and procedures.



The Data Protection Act 1998 requires organisations who process personal data to meet certain legal obligations. These are contained within the 8 Data Protection principles. HMRC is a data controller within the meaning of the Act and process large volumes of personal data.

Published 18 May 2010
Last updated 21 February 2018 + show all updates
  1. Updated with information about how to make a subject access request.
  2. This guidance has been updated to explain how requests are made.
  3. First published.