Personal data from cloud-based apps and accounts

The request was partially successful.

Dear HM Revenue and Customs,
I am aware that companies are selling technologies to government organisations to allow them to take vast quantities of personal data from cloud-based apps and accounts. You can read more [

I make the following request for documents/information under the Freedom of Information Act:

1. Do you use mobile phone extraction technology that includes cloud analytics / cloud extraction capabilities e.g. Cellebrite UFED Cloud Analyser, Magnet Axiom Cloud or Oxygen Forensics Cloud Extractor

2. Do you have other technologies that allow you to access cloud-based accounts and extract this data.

3. Please provide a copy of the relevant Data Protection Impact Assessment.

4. Please provide a copy of the relevant local and/or national guidance/standard operating procedure/policy.

5. Please confirm the legal basis you rely on to conduct cloud analytics/extraction.

Yours faithfully,

Trevor Price on behalf of FOI Central Team, HM Revenue and Customs

Our ref: FOI2020/00348

Dear Mr Price,

Freedom of Information Act 2000 Acknowledgement

Thank you for your communication of 13th February which has been passed to
HMRC's Freedom of Information Team.

We have allocated the above reference which you should quote if you need
to contact us.

The Team will arrange for a reply to be sent to you which will either
comply with HMRC's obligations under Freedom of Information Act or, if we
think it's an enquiry that we don't need to address under the terms of the
Act, let you know why. If it is the latter we will, if possible, pass it
on to a more appropriate part of the Department for answer.

Yours sincerely

HMRC Freedom of Information Act Team on behalf of Central FOI Team, HM Revenue and Customs

1 Attachment

Dear Mr Price,

We are writing in response to your request for information, received 13

Yours sincerely,

HMRC Freedom of Information Team