I received a letter recently from HMRC saying that they owe a me £1500 rebate for TY 05/06 but they are not paying it because they are working out 06/07 and waiting to see if I owe them money so they can offset the £1,500. A couple of days later I got a copy of the same letter which had been sent to my bank and which they forwarded to me. This letter contained my current tax details and the 05/06 rebate. The bank did not know why it was sent to them. I contacted HMRC by telephone to complain. Initially their response was that the bank is the authorised payee for my tax rebate and therefore it is my agent and therefore needs to be sent my tax details. I told them that I do not accept that and was told to complain in writing, which I have done. I've also complained that they are withholding money that they owe me - my money - against a possible future debt which in fact does not exist because I overpaid in 06/07 and they owe me money for that as well which i have claimed and am waiting for. As yet - 2 weeks - I have not had a response from them. I don't believe that releasing this information to the bank is a threat to my security because the bank could probably have worked it out for themselves anyway, but I am concerned about HMRC's cavalier attitude to data protection, who else are they releasing information to? I only know about the bank because the bank sent the letters on to me.