Case Study: HMRC Security Notices Overturned – Duma & Rockey v HMRC (Tax Tribunal Appeal)

In a landmark victory against HMRC Security Notices, the First-tier Tribunal (Tax Chamber) has set aside significant financial security demands in the case of Michael Stefan Duma and Harriot K Rockey v The Commissioners for His Majesty’s Revenue and Customs [2026] SFTT (TC/2023/08321). This case serves as a vital precedent for those facing HMRC Security Notice Defence, as it clarifies that HMRC cannot maintain security demands when the underlying business has ceased trading. The ruling, delivered by Tribunal Judge Keith Gordon and Mrs Charlotte Barbour, confirms that while HMRC may initially have grounds to issue a notice, the Tribunal possesses a full appellate jurisdiction to vary or cancel the requirements based on the reality of the situation at the time of the hearing.

Supervisory vs. Appellate Jurisdiction

The statement that the Tribunal’s jurisdiction is “broader than exercising a binary choice” stems from a critical distinction made in the decision between the rules governing VAT security and those governing PAYE/NIC security.

HMRC argued that the Tribunal’s role should be purely supervisory. In the context of VAT security notices (under the Value Added Tax Act 1994), the Tribunal’s powers are limited by established case law (such as John Dee Ltd and Peachtree Enterprises Ltd).

• Supervisory Nature: The Tribunal only checks if HMRC acted reasonably or made a legal error.
• Binary Outcome: If HMRC acted reasonably, the notice is upheld. If they acted unreasonably, the notice is quashed (set aside). The Tribunal cannot substitute its own decision or change the amount; it faces a binary choice of “uphold” or “quash”.

The Tribunal rejected HMRC’s argument for PAYE/NIC notices, determining that its powers are appellate and therefore broader. This conclusion relies on the specific wording of the Income Tax (PAYE) Regulations 2003, specifically Regulation 97V(5). Unlike the VAT legislation, Regulation 97V(5) explicitly provides the FTT with the power to vary as it states that on appeal, the Tribunal may: Confirm the requirements; Vary the requirements; or Set aside the notice.

The decision highlights that this specific legislative provision, the power to “vary”, fundamentally changes the Tribunal’s role.

• Beyond Reasonableness: While the Tribunal may still look at whether the decision to require security was reasonable (a supervisory question regarding “necessity” for revenue protection) , it has full power to determine the correctness of the terms.
• Practical Consequence: This means the Tribunal is not forced to quash a valid notice simply because the amount demanded was slightly incorrect. Instead, it can vary the notice to reflect the correct amount or terms (e.g., reducing the security duration or quantum).

The “clear” conclusion in the decision is that the presence of Regulation 97V(5) liberates the Tribunal from the restrictions of the VAT regime. It empowers the judge to do more than just say “yes” or “no” (the binary choice); it allows them to actively modify the notice to ensure it is just and accurate, exercising a full appellate jurisdiction over the specific requirements (such as the quantum of security).

Key Excerpts from the Decision

“It is clear from this that the Tribunal’s jurisdiction is broader than exercising a binary choice of upholding or quashing a notice, in that the Tribunal has the power to vary particular requirements within the notice.”

“For the reasons explained below, we decided that: (1) the decisions to issue the Notices are upheld (but for a different amount); (2) in light of further information made available to HMRC after the decisions to issue the Notices, the Notices are now set aside… Security should only be requested for future liabilities and not as a method of debt recovery for past arrears.“

“We see no justification for the Notices also to require the company and its directors to give security in relation to pre-existing PAYE/NIC debt owed by the company. It must be remembered that the exercise is to protect the revenue, and we interpret that as providing a safeguard that future amounts that might become owed to HMRC are not lost. As for amounts that have previously fallen due and are as yet unpaid, it is too late for those to be protected: it is akin to locking a stable door after the horse has bolted. In any event, HMRC have creditors’ rights to recover such sums (if available). Furthermore, to use a Notice of Requirement against a director in relation to pre-existing debt strikes us as an inappropriate way of jumping the queue of creditors and forcing the hand of a company’s directors in circumstances where insolvency law is unlikely to give other creditors such a remedy.“

“We do not see how any ongoing need to protect the revenue is served by maintaining these Notices in any form. As a result, we set them aside.“

The First-tier Tribunal exercised its appellate jurisdiction to set aside HMRC Security Notices. While HMRC initially argued their decision was reasonable based on past non-compliance, the Tribunal ruled that because the underlying business, Influence Network Ltd, had entered receivership and ceased trading, the “revenue protection” justification was no longer valid. The decision establishes a powerful precedent that security notices must be forward-looking and cannot be used to bypass standard insolvency procedures or to pursue directors when no future taxable activity exist.

Background to Security Notices and HMRC Enforcement

The appellants were directors of Influence Network Ltd, a company that specialised in influencer marketing. Following a period of financial instability exacerbated by the pandemic and the personal health challenges of the directors, the company fell into arrears regarding PAYE, NICs, and VAT. In April 2023, HMRC Officer O’Donnell issued formal Notices of Requirement (NOR) to give Security. These notices demanded over £175,000 for PAYE/NICs and over £40,000 for VAT, imposing joint and several liability on Mr Duma and Ms Rockey personally.

HMRC’s strategy was based on “revenue protection,” a common trigger for HMRC Tax Enforcement Action. However, as our FAQs on HMRC security notices explain, these demands are often issued without a full appreciation of the director’s personal circumstances or the actual future trading prospects of the company.

The Scope of Tribunal Jurisdiction and Legal Precedents

A pivotal element of this case was the dispute over the Tribunal’s powers. HMRC contended that the Tribunal’s role was strictly supervisory—meaning it could only check if the decision was “reasonable” when it was made. Represented by Mr Andrew Young of Counsel, the appellants successfully argued for a full appellate jurisdiction regarding the requirements of the notice. The Tribunal followed the reasoning in D-Media Communications v HMRC, establishing that while the decision to issue a notice is supervisory, the specific requirements of the notice of requirement (such as the amount and duration) can be substituted by the Tribunal’s own view.

This distinction is crucial for anyone seeking legal representation for tax tribunal appeals. It means that even if HMRC was “reasonable” to be worried about tax loss initially, the Tribunal can still strike down the notice if the specific demands are deemed inappropriate or excessive.

Analysis of Director Liability and Personal Hardship

The Tribunal meticulously examined the personal situations of the directors. Mr Duma provided evidence of severe financial hardship, including a mortgage repossession order, while Ms Rockey suffered from a serious, long-term illness. The Tribunal noted that Ms Rockey was “overwhelmed” by the notice and had not fully grasped the implications of joint and several liability for directors.

Crucially, the Tribunal found that HMRC had incorrectly included pre-existing tax debts in their calculations. This is a common error in HMRC PAYE enforcement powers where security is used as a proxy for debt collection. The judgment clarifies that security is forward-looking; it is intended to protect against future defaults, not to bypass standard insolvency or debt recovery procedures for past failures.

The Impact of Business Insolvency

By the date of the hearing on 8 January 2026, Influence Network Ltd had entered receivership. The Tribunal concluded that because the company was being wound up by the Official Receiver and was no longer making taxable supplies or running a payroll, the “protection of the revenue” justification had evaporated.

This sets a powerful precedent: if a business is no longer trading, there is no future revenue to protect, and therefore no legal basis for a security notice. This has been a recurring theme in our case studies of withdrawn security notices, where strategic legal intervention highlights the disconnect between HMRC’s demands and the commercial reality.

Conclusion and Strategy for Appellants

The Duma & Rockey decision is a landmark victory that confirms the Tribunal’s power to intervene and set aside notices when circumstances change. For directors facing these “paralysing” demands, the case highlights the importance of a legal challenge to a notice of requirement.

HMRC cannot simply maintain a security notice as a punitive measure against directors of failed businesses. If you are facing similar action, it is essential to act within the 30-day appeal window. As this case proves, expert appeal against HMRC security notices can lead to the complete withdrawal of personal liability and the protection of your financial future.

⭐⭐⭐⭐⭐ Client feedback…