That's not the case at all. HMRC is very proscriptive about what you can do with their data, that's if they let you near it all, even then client consent is absolutely required for each access.