2 articles, newest first.
HMRC's software spec says CIS return corrections must not be sent online. Everyone sends them anyway, the schema can't say "replace", and a letter with a 14-day deadline decides the rest.
For eleven years payroll software had to send HMRC a SHA-256 hash of every Bacs payment so they could check the money matched. It couldn't tell who was paid, and one email retired it mid-year.
Google Analytics, only if you accept. No cookies otherwise.