7 million people's voiceprints collected without real consent. HMRC told callers to say "my voice is my password" — but never explained they were creating a permanent biometric record. Big Brother Watch caught them. The ICO ruled it a GDPR breach. HMRC had built one of the largest biometric databases in the UK and called it customer service. HMRC analyses 1 billion data points a year. Your eBay sales, Airbnb listings, Instagram photos showing a new car — all cross-referenced against your tax return. Their system, called Connect, is the most powerful financial surveillance tool in the UK. Post a photo of your holiday villa? Connect checks if you declared the rental income.
What they claim: HMRC describes its Voice ID biometric system as optional and consent-based
What we found: Big Brother Watch filed a complaint with the ICO after discovering HMRC had enrolled 7 million taxpayers' voiceprints without explicit consent. Callers were told "say 'my voice is my password'" without being informed this created a biometric record. The ICO ruled HMRC had breached GDPR and ordered deletion of non-consensual voiceprints.
What they claim: HMRC privacy notice describes data collection as necessary for tax administration
What we found: HMRC operates one of the most extensive data collection programs in the UK, buying bulk data from banks, employers, property registries, social media platforms, and offshore financial databases. HMRC's Connect system analyses 1 billion data points annually, cross-referencing tax returns against eBay sales, Airbnb listings, and social media posts showing undeclared wealth.
What they claim: HMRC promotes Making Tax Digital as simplifying tax for businesses and individuals
What we found: HMRC's Making Tax Digital programme forces small businesses and self-employed individuals to use approved commercial software to submit tax records quarterly. Critics note this effectively mandates purchasing from HMRC-approved vendors (Sage, Xero, QuickBooks), creating a forced market for private companies using public policy. The Federation of Small Businesses estimated compliance costs of £2,770 per business.