The UK’s data protection watchdog has issued the government department responsible for collecting taxes with a final enforcement notice, after an investigation found HMRC had collected biometric data from millions of citizens without obtaining proper consent. HMRC has 28 days from the May 9 notice to delete any Voice ID records where it did not