TSI000500 - Data Protection

Note: This manual is under review following Brexit and is likely to be withdrawn. If there is anything within this manual you use regularly, please email hmrcmanualsteam@hmrc.gov.uk to let us know. Please check the other guidance available on GOV.UK from HMRC.

Any processing of personal data will be carried out under Article 6(e) of the General Data Protection Regulation (GDPR) HMRC Privacy Notice.

Any processing of special category data will be carried out under the Article 9 of the GDPR and Schedule 1 of the Data Protection Act (DPA) 2018 HMRC appropriate Policy document.

Retention of personal data will be in line with the HMRC Records Management and Retention and Disposal Policy.

Any sharing of personal data outside of HMRC will follow the:

• Date Sharing guidance within the HMRC Privacy Notice
• Contracts and data sharing guidance published on the ICO website
• HMRC Information Disclosure Guide available on Gov.UK