TTTC1050 - Data protection

Data protection

HMRC will:

• process personal data under article 6(e) of the General Data Protection Regulation (GDPR) HMRC Privacy Notice(link is external)
• process special category data under article 9 of the GDPR and schedule 1 of the Data Protection Act (DPA) 2018 HMRC appropriate Policy document(link is external)
• retain personal data in line with the HMRC Records Management and Retention and Disposal Policy (link is external).

Any sharing of personal data outside of HMRC will follow the:

• data sharing guidance (link is external) within the HMRC Privacy Notice
• contracts and data sharing guidance (link is external) published on the ICO website
• HMRC Information Disclosure Guide (link is external) available on GOV.UK