Make multiple subject access requests to HMRC
Most agents and individuals can apply to make a subject access request to HMRC via our publicly available routes.
If you make multiple requests for similar information on behalf of others, we may give you an access code for this service. You won’t be able to use this form without an access code.
From: HM Revenue & Customs
Contents
- Access information as an agent or solicitor
- What you’ll need to apply
- Start your subject access request
Access information as an agent or solicitor
Agents and solicitors can access their client’s personal information from the last 5 years using the Income Record Viewer if the client has given authorisation.
Find out how to:
- get authorised to act as a tax agent on behalf of your clients
- get access to the Income Record Viewer
- sign in to your agent services account
You should only use this service to submit a SAR for information that is not included in the Income Record Viewer.
What you’ll need to apply
You must submit evidence with your subject access request that shows valid consent has been obtained from the data subject you act on behalf of. The 'authorise a tax agent' (64-8) form does not allow us to release SAR information to an agent. This is because a SAR is a specific one-off request for personal data.
Your proof of authority, which can be the HMRC consent form, must:
- be signed by the data subject, specific to this SAR and separate to their consent for any other process
- be dated within 6 months of today
- list the specific information requested in language the data subject can understand and avoid broad category descriptions
- explicitly ask HM Revenue and Customs to send information directly to you
- provide your name and address
Start your subject access request
You must have an access code provided by HMRC to use this service. If you do not have a code, please follow the instructions at: apply to make a subject access request to HMRC.
Your proof of authority is valid for this request only and any further SAR will require a new third-party authorisation to be provided.