UK Tax Agency Told To Delete 5M Files After GDPR Breach

Law360, London (May 7, 2019, 3:25 PM BST) -- Britain’s data regulator has ordered HM Revenue and Customs to delete the voice records of five million taxpayers that it collected in breach of the European Union’s sweeping General Data Protection Regulation.

The Information Commissioner’s Office accused the tax collection agency of failing to give customers sufficient information about how their biometric data would be processed, starting from January 2017. The agency failed to give taxpayers the opportunity to give or refuse consent for the information to be processed, the regulator said in a statement on Friday.

HMRC has been given until June 5 to delete the unlawfully obtained files....

Stay ahead of the curve

In the legal profession, information is the key to success. You have to know what’s happening with clients, competitors, practice areas, and industries. Law360 provides the intelligence you need to remain an expert and beat the competition.


  • Access to case data within articles (numbers, filings, courts, nature of suit, and more.)
  • Access to attached documents such as briefs, petitions, complaints, decisions, motions, etc.
  • Create custom alerts for specific article and case topics and so much more!

TRY LAW360 FREE FOR SEVEN DAYS