Guidance

Voice Identification Privacy Notice

Published 27 July 2018

The purpose of this document

This privacy notice explains how HMRC collects and uses your voice identification data.

You should read the HMRC Privacy Notice alongside this privacy notice.

Voice identification will:

  • make it easier for you to pass the security process
  • reduce the time you wait to speak to an advisor
  • help prevent anyone else accessing your HMRC account

You can use voice identification for:

You’ll only need to register once.

We’ll ask if you want to register for voice identification when you call HMRC. If you do, we’ll ask for consent to process your voice identification data.

If you do not consent, you can continue to answer security questions to access your HMRC account.

How we collect your voice identification data

When you register for voice identification, we’ll ask you to repeat the phrase ‘my voice is my password’ up to 5 times.

How we use your voice identification data

HMRC stores your voice recordings, and converts them into biometric data. We do this by using the sound and rhythm of your voice to identify a numerical pattern. This pattern is unique to you in the same way your fingerprint is, and still works if you’re unwell.

We’ll only use this data to identify you when you call HMRC.

How long we keep your data

HMRC will keep your voice identification data for 6 years from the date it was last used, unless:

  • you withdraw consent for us to keep it
  • we replace the voice identification system

How we protect your data

HMRC will encrypt your data and store it in a UK data centre, where we are the data controllers. We will never share this information with anyone outside HMRC.

Your rights

You can read about your rights in the HMRC Privacy Notice.

You can ask for a copy of your voice recording by raising a subject access request. HMRC cannot provide a copy of your biometric voiceprint, as it can only be read within the voice identification system.

You can call any of the HMRC services that use voice identification to:

  • withdraw consent and ask for your data to be deleted
  • re-record your voice identification data

If you withdraw consent, you will not be able to use voice identification for any HMRC service.

You’ll need to pass voice identification to withdraw consent or re-record your voice identification data.

Contact HMRC or make a complaint

You can contact us if you have questions about this privacy notice or want to make a complaint.

Changes to this privacy notice

We keep our privacy notices under regular review.

If we make changes to this notice, we’ll amend the date at the top of this page. Changes will apply to you and your data from that date.