Recommendation 36

We asked HMRC whether the age of some of its IT systems were going to make it more difficult to adopt AI. HMRC agreed and considers the “critical thing with AI is making sure you really have a handle on where your data is and that you are managing your data well.” 72 We also asked HMRC about the risk posed by AI to tax evasion and avoidance.73 HMRC told us that “it is a fact of life that bad actors tend to be a bit more agile and a bit more flexible than good actors. You see that right across big organisations, public sector and private sector.” HMRC also agreed that legacy systems are more likely to suffer cyber–attacks.74