HMRC has agreed to delete five million voice records after breaching the GDPR by failing to gain explicit agreement from callers to keep their recordings.
The Information Commissioner’s Office (ICO) said in a statement:
“Innovative digital services help make our lives easier but it must not be at the expense of people’s fundamental right to privacy”.
HMRC said in a statement:
“I have informed ICO that we have already started to delete all records where we do not hold explicit consent and will complete that work well before ICO’s 5 June 2019 deadline. These total around 5 million customers who enrolled in the Voice ID service before October 2018 and have not called us or used the service since to reconfirm their consent.”
The Voice ID project is continuing and the ICO has confirmed that no fine will be issued to HMRC as long as the records are deleted.