Sharing information outside of HMRC: disclosure for HMRC’s functions: disclosing anonymous information
Fully anonymised customer information (where there is no possibility of a third party correctly identifying the customer from the information disclosed) does not attract the criminal sanction for wrongful disclosure, and the act of disclosure is not subject to the Data Protection Act and GDPR 2018 (see IDG40160) and the Human Rights Act (see IDG40140). This includes a person deducing the identity by putting the information disclosed by HMRC together with other information available to him/her.
Even where the information is fully anonymised, disclosure requires a valid legal basis. This basis can be for the purpose of HMRC’s functions. The methodology and factors to be taken into account to determine whether the functions basis can be relied upon is the same as set out at IDG40410.
HMRC publishes a range of aggregate, anonymised and other data that does not identify individual customers (for example, aggregate tax receipts) for the purposes of its functions. These publications increase public understanding of, and confidence in, the tax system and hence will increase the amount of tax collected. Examples are listed below:
Publishing statistics or guidance
In the course of their normal duties, HMRC officers will regularly disclose administrative information (for example, about HMRC processes) or information drawn from customer data, which has been sufficiently anonymised so that the identity of individuals cannot be deduced.
This includes material published on HMRC’s internet site, general guidance given in telephone conversations, policy issues discussed in meetings with representative bodies, and statistics included in annual reports or published as National Statistics. The identity of the customer cannot be deduced from the information and the disclosure supports the functions of HMRC.
Information may also be lawfully disclosed where it is necessary to include specific case details to carry out a function of HMRC but the customer identity can readily be anonymised. For example, referring to case studies in publicity and guidance material, or providing information to overseas authorities about trends in smuggling. It is important in such cases that the information provided is not sufficient to enable the identity of any customer(s) to be deduced.