HMRC unable to accept encrypted media

Here we are over 2 months after the initial Child Benefit fiasco; you would think the HMRC would have introduced controls to accept encrypted media?

http://www.ico.gov.uk/upload/documents/library/data_protection/notices/m_and_s_sanitiseden.pdf

We refer to their guidelines dated 1st March 2007, which have not been updated, revised or refreshed.

It states on page 7, Section 1.3 Encrypted Files “HMRC is only able to accept self de-crypting files” which rather defeats the object.

If you send an encrypted file, or if the file is not ASCII, UNICODE or EBCDIC, if it has a file extension, eg a password–protected .doc, .xls or .zip, then the file will be rejected, and you will have been deemed not to have supplied the Statutory Return according to schedule, and you will be fined. 

What sensitive personal data is on the S17 file? 

Name, Address, Postal Code, Date of Birth, Place of Birth, Country of Birth, National Insurance Number/TaxPayer Identification Number – oh great for Identity Theft or getting hold of a Birth Certificate then! 

Good old Fujitsu – really ahead of the game! 

Why doesn’t the ICO give them/HMRC 60 days notice as well?