© Crown copyright 2018
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: email@example.com.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/voice-identification-privacy-notice/voice-identification-privacy-notice
The purpose of this document
This privacy notice explains how HMRC collects and uses your voice identification data.
You should read the HMRC Privacy Notice alongside this privacy notice.
Voice identification will:
- make it easier for you to pass the security process
- reduce the time you wait to speak to an advisor
- help prevent anyone else accessing your HMRC account
You can use voice identification for:
You’ll only need to register once.
How we ask for your consent
We’ll ask if you want to register for voice identification when you call HMRC. If you do, we’ll ask for consent to process your voice identification data.
If you do not consent, you can continue to answer security questions to access your HMRC account.
How we collect your voice identification data
When you register for voice identification, we’ll ask you to repeat the phrase ‘my voice is my password’ up to 5 times.
How we use your voice identification data
HMRC stores your voice recordings, and converts them into biometric data. We do this by using the sound and rhythm of your voice to identify a numerical pattern. This pattern is unique to you in the same way your fingerprint is, and still works if you’re unwell.
We’ll only use this data to identify you when you call HMRC.
How long we keep your data
HMRC will keep your voice identification data for 6 years from the date it was last used, unless:
- you withdraw consent for us to keep it
- we replace the voice identification system
How we protect your data
HMRC will encrypt your data and store it in a UK data centre, where we are the data controllers. We will never share this information with anyone outside HMRC.
You can read about your rights in the HMRC Privacy Notice.
You can ask for a copy of your voice recording by raising a subject access request. HMRC cannot provide a copy of your biometric voiceprint, as it can only be read within the voice identification system.
You can call any of the HMRC services that use voice identification to:
- withdraw consent and ask for your data to be deleted
- re-record your voice identification data
If you withdraw consent, you will not be able to use voice identification for any HMRC service.
You’ll need to pass voice identification to withdraw consent or re-record your voice identification data.
Contact HMRC or make a complaint
You can contact us if you have questions about this privacy notice or want to make a complaint.
Changes to this privacy notice
We keep our privacy notices under regular review.
If we make changes to this notice, we’ll amend the date at the top of this page. Changes will apply to you and your data from that date.