[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQctrmI0K0q7bGqA3KvWu8LQa-EDNHH8xo-7fWV36JPA":3},{"assets":4,"attachments":5,"tags":6,"dataRetentionRules":16,"creatorUser":20,"creatorUserId":20,"updatedBy":20,"updatedById":20,"publishedBy":20,"publishedById":20,"areaOwnerId":20,"owners":78,"customFields":79,"area":80,"entity":84,"mergedFrom":20,"workflowStep":99,"accountables":105,"responsibles":106,"informedOwners":107,"securityMeasures":108,"personCategories":142,"id":24,"source":42,"label":25,"state":104,"versionDescription":20,"processingType":31,"parentId":20,"areaId":30,"mergeType":20,"readonly":21,"editable":36,"workflowStepId":100,"dateDeployment":20,"dateCreation":29,"dateArchived":20,"datePublication":163,"archived":21,"dateUpdate":28,"reviewDate":164,"nextReviewDate":20,"ref":20,"processingState":20,"description":26,"descriptionHtml":77,"subjectRightProcessDescription":20,"rightOfInformation":20,"rightOfAccess":20,"rightOfRectification":20,"rightOfErasure":20,"rightOfRestriction":20,"rightOfOpposition":20,"rightOfDataPortability":20,"advanceDirectives":20,"advanceDirectivesDescription":20,"rightOfInformationDescription":20,"rightOfAccessDescription":20,"rightOfRectificationDescription":20,"rightOfErasureDescription":20,"rightOfRestrictionDescription":20,"rightOfOppositionDescription":20,"rightOfDataPortabilityDescription":20,"stakeHolders":165,"assessmentScoring":36,"automaticDecision":20,"systematicMonitoring":20,"specialCategoryData":36,"largeScaleCollection":36,"crossReferencing":20,"vulnerablePeople":20,"isDPIARequired":36,"dpiaDate":20,"dpiaExemption":21,"dpiaExemptionJustification":20,"innovativeUse":20,"exclusionBenefitRightContract":20,"recipients":166,"dataControllers":182,"purposes":183,"progression":191,"quality":192,"sensitivity":193,"visible":36,"workspaceId":27,"nbReferences":194,"referenceId":20},[],[],[7,12],{"id":8,"label":9,"type":10,"color":11},"a83a383b-97bf-4088-b5cb-9bf86cb62163","Government","DataProcessing","#CD0BD5",{"id":13,"label":14,"type":10,"color":15},"797b56ce-434d-4873-9321-a3b0895269ec","Public","#17a2b8",[17],{"customFields":18,"tags":19,"creator":20,"readonly":21,"purposes":20,"dataProcessings":22,"dataFields":32,"asset":20,"subjectCategories":66,"id":67,"ref":20,"externalId":20,"externalLastSyncDate":20,"externalSource":20,"label":68,"description":20,"dateCreation":69,"dateUpdate":70,"baseActiveOverride":21,"intermediateArchivingOverride":21,"destructionOverride":21,"baseActiveDescription":71,"baseActiveLegalBasis":72,"baseActiveRetentionDuration":20,"baseActiveMinMax":20,"intermediateArchivingLegalBasis":73,"intermediateArchivingDescription":74,"intermediateArchivingRetentionDuration":20,"intermediateArchivingMinMax":20,"destructionDescription":75,"destructionLegalBasis":20,"dataSetSource":76,"sourceDescription":77,"assetId":20,"source":42},{},[],null,false,[23],{"id":24,"label":25,"ref":20,"description":26,"workspaceId":27,"archived":21,"dateUpdate":28,"dateCreation":29,"areaId":30,"processingType":31},"d66fa579-7562-4b81-857f-0a2c6f4ad88e","Tax Fraud Detection and Risk-Based Audit Targeting","Processing of taxpayer data by HMRC (or equivalent public authority) to detect correlations between high-risk files and fraudulent behaviour using data analytics and machine learning tools, in order to prioritise audits and investigations.",71,"2025-09-01T15:09:48.2088128","2023-08-08T12:01:54.9493002",116,"Default",[33,43,50,56,61],{"id":34,"customFields":35,"ref":20,"archivingPolicy":20,"required":36,"label":37,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":39,"dataType":20,"dateCreation":40,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"f30a0b03-cfc3-4450-a220-e2540da47102",{},true,"Telephone number","Current","CivilStatus","2023-08-08T12:01:41.1881938",83447,"Intern",{"id":44,"customFields":45,"ref":20,"archivingPolicy":20,"required":36,"label":46,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":47,"dataType":20,"dateCreation":48,"dateUpdate":49,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"484ccd3b-fb3f-4234-9f21-60e9579abac3",{},"Email","ProfessionalLife","2023-08-08T12:05:07.9693197","2025-08-25T07:51:02.858571",{"id":51,"customFields":52,"ref":20,"archivingPolicy":20,"required":36,"label":53,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":54,"dataType":20,"dateCreation":55,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"a7e601db-7c9e-4e82-a373-1b2b30632147",{},"Bank details","EconomicFinancialData","2023-08-08T12:01:55.563984",{"id":57,"customFields":58,"ref":20,"archivingPolicy":20,"required":36,"label":59,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":20,"dataType":20,"dateCreation":60,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"55868802-43ee-4dca-8ca9-7b41d2b30de9",{},"Tax data for individuals","2023-08-08T12:01:55.7049367",{"id":62,"customFields":63,"ref":20,"archivingPolicy":20,"required":36,"label":64,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":20,"dataType":20,"dateCreation":65,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"f314d3e6-34a9-4864-8119-af0421d8532f",{},"Professional tax data","2023-08-08T12:01:55.8555968",[],"80d17a9d-49c9-41de-a8d3-1f6da1a8dd5f","Fraud detection dataset","2023-08-08T12:01:55.1153052","2025-09-01T15:07:45.8640796","Retained while investigation or audit is ongoing.","Retention aligns with storage limitation (Art. 5(1)(e) UK GDPR) and HMRC statutory guidance.","Limitation Act 1980; HMRC compliance record retention","6 years after closure of case","Deletion or anonymisation unless required for litigation, appeals, or statutory audit trails.","Direct","",[],{},{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":20,"id":30,"type":81,"parentId":82,"ref":20,"label":83,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":20,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":20},"Area",357,"Template (english)",{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":85,"id":82,"type":96,"parentId":20,"ref":20,"label":97,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":98,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":86},{"id":86,"label":87,"siteURL":88,"phoneNumber":89,"email":90,"countryCode":91,"address":92,"city":93,"zipCode":94,"declarationViolationUrl":95},34,"ICO - Information Commissioner's Office","https://ico.org.uk/","0303 123 1113","casework@ico.org.uk","UKI","Wycliffe House Water Lane Wilmslow","Cheshire","SK9 5AF","https://ico.org.uk/make-a-complaint/","Entity","Regulatory Reference – English","GB",{"id":100,"label":101,"color":102,"order":103,"itemLimit":20,"type":10,"finalStep":36,"initialStep":21,"authorizedRole":20,"authorizedRoleId":20,"descriptionHtml":20,"mappedState":104},1062,"Done","#42c478",3,"Active",[],[],[],[109,122,133],{"date":110,"state":111,"descriptionHtml":20,"readonly":21,"purposes":112,"customFields":113,"id":114,"ref":20,"label":115,"type":116,"description":117,"relatedRisk":20,"moreDetailsUrl":77,"dateCreation":118,"dateUpdate":20,"tags":119,"attachments":120,"creatorUser":20,"workflowStepId":121,"workflowStep":20},"2026-04-21T19:12:40.3072748Z","None",[],{},"d9669fc5-f2c8-4906-a787-0d52551fc455","Management of authorizations","Organizational","Limit access to only the data a user needs","2023-08-08T12:01:38.1567426",[],[],90381,{"date":123,"state":111,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":124,"id":125,"ref":20,"label":126,"type":127,"description":128,"relatedRisk":20,"moreDetailsUrl":77,"dateCreation":129,"dateUpdate":130,"tags":131,"attachments":132,"creatorUser":20,"workflowStepId":121,"workflowStep":20},"2026-04-21T19:12:40.3072791Z",{},"d8029fc2-1a1b-4912-82a5-158644e945ea","Logical access control","Technical","To ensure that a user only accesses the data he/she needs, he/she must be given a unique identifier and must authenticate himself/herself before any use of the IT resources.","2023-05-11T16:19:47.2605656","2024-05-16T22:17:09.1656433",[],[],{"date":134,"state":111,"descriptionHtml":20,"readonly":21,"purposes":135,"customFields":136,"id":137,"ref":20,"label":138,"type":127,"description":77,"relatedRisk":20,"moreDetailsUrl":77,"dateCreation":139,"dateUpdate":20,"tags":140,"attachments":141,"creatorUser":20,"workflowStepId":121,"workflowStep":20},"2026-04-21T19:12:40.3072796Z",[],{},"e855ce4c-6f7a-40dd-af97-ed01cb311372","Individual login and password","2022-12-13T10:01:04.3028922",[],[],[143,153],{"subjectCategory":144,"displayName":146,"id":150,"subjectCategoryId":145,"comment":151,"dataSubjectVolumeMax":20,"readonly":21,"purposes":152},{"id":145,"label":146,"ref":20,"dateCreation":147,"dateUpdate":20,"creatorUserId":148,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":149,"workflowStep":20},"e8a54834-58c3-48d6-945a-b419055fb4b7","Citizens","2023-08-08T12:01:48.6649717",6931,97315,"98e82e7e-06c0-448c-8b8d-2b766af7a90e","taxpayers: individuals and sole traders",[],{"subjectCategory":154,"displayName":156,"id":160,"subjectCategoryId":155,"comment":161,"dataSubjectVolumeMax":20,"readonly":21,"purposes":162},{"id":155,"label":156,"ref":20,"dateCreation":157,"dateUpdate":20,"creatorUserId":158,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":159,"workflowStep":20},"72b0bceb-5f79-41bc-4376-08dde8b8a9c3","Legal entities","2025-09-01T14:05:04.6413056",38,97314,"0264c7bb-ae11-4f23-afc3-08dde83d672a","Legal entities and their officers (for corporate tax compliance).",[],"2025-09-01T15:09:48.2088126","2023-10-09T12:33:24.7350013",[],[167,175],{"purposes":168,"dataRetentionRules":20,"parentId":20,"children":169,"displayName":170,"label":170,"transfers":171,"recipientType":172,"type":173,"jobTitle":20,"id":174,"actorId":20,"actor":20,"areaId":20,"area":20,"description":20,"readonly":21},[],[],"Other UK public authorities (e.g. Serious Fraud Office, National Crime Agency) where legally mandated.",[],"ThirdParty","Recipient","cc3cd46f-e846-4780-d86f-08dde83dc8ab",{"purposes":176,"dataRetentionRules":20,"parentId":20,"children":177,"displayName":178,"label":178,"transfers":179,"recipientType":180,"type":173,"jobTitle":20,"id":181,"actorId":20,"actor":20,"areaId":20,"area":20,"description":20,"readonly":21},[],[],"HMRC authorised personnel, fraud investigation and audit teams.",[],"InternalService","b7cf274f-33de-40e1-b696-fc2b5ac5a0ab",[],[184],{"id":185,"key":186,"label":187,"description":20,"legalBasis":188,"legalBasisText":189,"legalBasisDescription":190,"readonly":21},"49a715d4-cd06-4f7b-bb3c-f99b746a6a76","a0c22820-df66-466b-9540-b14bd709a3e6","Improve targeting of taxpayers to be audited","LegalCommitment","Legal obligation","Art. 6(1)(c) (legal obligation) + Art. 6(1)(e) (public task). HMRC is legally required to collect and protect tax revenue; fraud detection is a statutory obligation. Legitimate interest is not sufficient for a public authority in this context.",100,56,18,0]