Accessing HMRC’s web services

This policy paper focuses on practices that rely on the use of HM Revenue and Customs (HMRC) sign-in details that do not belong to the person or organisation using them. It does not introduce new online services terms and conditions. It is a clarification of HMRC’s existing policy position, including its existing policy in relation to the use of automation in Government Gateway.

The policy paper outlines:

• why organisations, individuals or third parties must not use HMRC sign-in details that do not belong to them to access, enter or extract data from HMRC’s web services, through manual or automated means
• why organisations, individuals or third parties, including software developers, must never request, collect or use HMRC sign-in details that do not belong to them, by any means
• HMRC’s view of third-party software products that request, require or encourage HMRC customers to provide their HMRC sign-in details to access HMRC’s web services, and how HMRC may respond to developers or users of such products
• HMRC’s policy that automation tools must not be used to enter data into or navigate Government Gateway and what HMRC means by automation for this purpose