Big Brother Watch|Daily Insight|Featured|GDPR|HMRC|voice recognition ID

HMRC steps into privacy problems with voice ID scheme

HMRC's voice recognition password technology has proved popular - with 5.1 million taxpayers joining up to access their details on the phone. The only problem is that it appears HMRC did not ask for explicit consent to set up the biometric IDs.

A probe following a freedom of information request by Big Brother Watch reveals that millions of callers to HMRC are asked to say, “My voice is my password” on an automated line, before being able to access their tax information.

The privacy campaign group says folk are being “railroaded into a mass ID scheme”.  There is also the potential that, because there's no opt in or opt out, the scheme breaches data protection laws.

Looking at the issue of HMRC voice ID

The Information Commissioner’s Office has confirmed that it has received a complaint from Big Brother Watch and that it is looking at the issue.

The following questions may need addressing (for starters):

  • Have the IDs been shared with other government departments.... or will/can they?
  • How are the IDs are stored and used?
  • Are they adequately protected?
  • What are the implications cyber-security wise?
  • Is it possible to delete a voice ID?
  • Which legal territory is the data is kept in?
  • How much has the scheme cost?
  • Is the scheme privacy compliant?

I recently set up my own voice recognition password with HMRC. I was getting particularly frustrated at the amount of time it was taking to access my information. To be honest, I didn't give it a second thought when the automated line said: “I’ll need you to say exactly those words”.

My voice is my password

“It’s important you repeat exactly the same phrase. Please say ‘My voice is my password’.”

The next time you call the helpline, Bob's your uncle. The voice ID technology recognises the sound and rhythm of your voice and takes you through to the next stage of the inquiry process. Clever, but there are concerns.

Big Brother Watch's website says: "The security of voice ID has been disputed. The technology came under fire in 2017 when a BBC reporter tricked HSBC’s voice ID system into allowing access to a bank account."

Silkie Carlo, director of Big Brother Watch, adds: “Taxpayers are being railroaded into a mass ID scheme that is incredibly disturbing."

Data protection principles

"These voice IDs could allow ordinary citizens to be identified by government agencies across other areas of their private lives.”

Pat Walshe, director of Privacy Matters, says:“HMRC’s voiceprint scheme appears to be almost surreptitious, failing to meet basic data protection principles."

A spokesperson for HMRC says: “Our Voice ID system is very popular with customers as it gives a quick and secure route into our systems. The Voice ID data storage meets the highest government and industry standards for security.”

by Rob Deighton