Reviewed by: MyTaxRebate Team on 9 Mar 2026 | Authority: s.865 TCA 1997
Quick Answer
When you authorise a tax agent in Ireland through Revenue's e-linking system, the agent gains read and submission access to your Revenue tax record for the purpose of managing your claim. This is not the same as sharing your the Revenue system password - legitimate agents never ask for or use your login credentials. The access is limited to the scope of tax agent activities, governed by Revenue's Code of Practice for Agents, and protected under GDPR and the Data Protection Act 2018. Access can be revoked at any time through your the Revenue system settings.
What This Page Covers
- ✓How the Revenue e-linking process works and what access it grants
- ✓What information a tax agent can and cannot access on your Revenue record
- ✓How GDPR protects your personal data when using a tax service
- ✓How to verify that an agent is using the legitimate e-linking mechanism
- ✓How to revoke agent access if you need to
- ✓What happens to your data after your claim is processed
Key Facts at a Glance
- ✓Authorisation is through Revenue's e-linking system - your the Revenue system password is never shared
- ✓Claims backdated up to four years under s.865 TCA 1997 - 2022, 2023, 2024, and 2025 open
- ✓GDPR applies to all personal data processed by a tax agent in Ireland
- ✓Agent access is limited to tax record information relevant to the claim
- ✓You can revoke agent access at any time through the Revenue system → Manage Tax Agent
- ✓Revenue's e-linking system is a secure, authenticated connection managed by Revenue
Security Matters Because Tax Claims Are Evidence-Heavy
Tax refund work involves sensitive personal and financial information, so security is not a background feature; it is part of the claim experience. Workers need to know that the details they provide for identification, employment review, and evidence submission are handled in a disciplined way. MyTaxRebate treats security as a core component of operational trust, particularly because PAYE refund reviews often require information gathered across several years and several employers.
A strong security page should therefore connect protective measures to practical claim handling. MyTaxRebate does this by framing data protection as part of how the review is conducted, updated, and resolved, not as an abstract technical promise detached from the client journey.
Why This Topic Matters in a Full Tax Refund Review
These broader MyTaxRebate guides are strongest when they move beyond a headline promise and explain how the topic fits into the worker's actual refund journey. MyTaxRebate treats each of these issues as part of a wider PAYE review rather than as standalone marketing copy. That matters because service quality, pricing clarity, security, dispute support, and review depth only have meaning when they are tied back to how a real claim is prepared, checked, submitted, and followed through with Revenue.
The practical value for the reader is certainty. Workers who are already unsure about overpaid tax often hesitate because they do not know whether the process is credible, what evidence is needed, or how a claim is managed once it leaves their hands. MyTaxRebate addresses those questions by combining Revenue-linked review, year-by-year analysis across the open claim window, and professional coordination of supporting information. That is what turns a promising message into an operationally trustworthy one.
It also explains why a broader review frequently produces a better result than a narrow single-issue claim. A worker may arrive through one blog topic, such as pricing, process, or claim support, but still have several distinct refund items in the same open years. MyTaxRebate therefore connects these service-focused pages back to the wider PAYE reality: emergency tax, unclaimed credits, flat-rate expenses, medical relief, and multi-year recovery all interact with the final outcome.
Check Your Claim
MyTaxRebate can review your position and guide the next step.
How the Revenue E-Linking Process Works
Under s.865 TCA 1997 (which establishes the statutory right for PAYE workers to claim overpaid income tax), a taxpayer can authorise a registered tax agent to act on their behalf through Revenue's e-linking mechanism. This authorisation is processed entirely within Revenue's own system. The taxpayer approves the authorisation by logging into the Revenue system and confirming the agent link. The agent does not receive the taxpayer's login credentials at any point in this process.
Once e-linked, the agent has access to the information on the taxpayer's Revenue record that is relevant to preparing and submitting a repayment claim. This includes income details sourced from employer PAYE returns, details of tax credits currently allocated, any previous claims submitted, and Revenue correspondence related to tax matters. The agent can view and use this information to prepare the claim, but cannot modify your bank account details, your PPS number, or your personal contact information without additional authorisation from you.
GDPR (General Data Protection Regulation) and the Data Protection Act 2018 govern how a tax agent processes your personal data. Under GDPR, a tax agent is a data controller in respect of your personal information and must process it only for the lawful purpose of managing your claim. Your data cannot be sold, shared with third parties for marketing, or used for any purpose other than the tax claim without your explicit consent.
MyTaxRebate retains your data only for as long as necessary to manage your claim and comply with legal obligations. After your claim is processed and any retention period required by law has elapsed, your data is securely deleted or anonymised. You have the right under GDPR to access, correct, or request deletion of your data at any time by contacting MyTaxRebate directly.
Check Your Claim
MyTaxRebate can review your position and guide the next step.
Tax Scenarios
Employee with missing credits
A PAYE worker finishes the year with standard credits not fully reflected in payroll. The corrected annual calculation reduces liability by €940, creating a refund once the file is reviewed properly.
Worker who changed jobs
An employee changes employer twice in one year and payroll deductions do not align neatly across the record. A full review shows €780 of overpaid tax after the final year-end reconciliation.
Part-year worker with reliefs still unused
A worker has employment income for only part of the year and also has allowable reliefs that were never fully used. The combined review produces a refund of about €1,120 rather than a smaller payslip-only correction.
Common Mistakes To Avoid
- ✗Sharing your the Revenue system username and password with any tax service (legitimate agents never require this)
- ✗Using a service that is not registered with Revenue (they cannot use the e-linking system and cannot legitimately access your record)
- ✗Not reading the privacy policy of any tax service before providing personal information
- ✗Forgetting to revoke agent access after your claim is complete if you no longer wish the agent to have access
- ✗Not following up if you have not received a GDPR data access response within the statutory one-month period
- ✗Sharing your the Revenue system password directly with a tax agent. The correct method is the e-linking mechanism, which grants limited, auditable access without sharing credentials.
When This Does Not Apply
Key Takeaways
- Legitimate tax agents authorise access through Revenue's e-linking system, not by requesting your the Revenue system password.
- GDPR and the Data Protection Act 2018 govern how your personal data is used by any Irish tax agent.
- Agent access can be revoked at any time through the Revenue system → Manage Tax Agent.
- Claims can be submitted for the four open years (2022 - 2025) under s.865 TCA 1997.
Check Your Claim
MyTaxRebate can review your position and guide the next step.
Frequently Asked Questions
Does a tax agent need my the Revenue system password?
No. A legitimate Revenue-registered tax agent in Ireland never needs or asks for your the Revenue system password. Agent authorisation is conducted entirely through Revenue's e-linking system, which requires you to log into your own the Revenue system and confirm the agent link. The agent gains access only through this authenticated system. Any service that asks for your the Revenue system username and password is not operating within Revenue's legitimate agent framework.
What information does a tax agent see on my Revenue record?
Through e-linking, a registered tax agent can view the tax record information relevant to preparing your claim. This includes income details from employer PAYE returns, your current tax credit allocations, details of any previous claims or Revenue correspondence, and the preliminary end-of-year statements for each open year. The agent cannot modify your bank account details, PPS number, or personal contact information without your explicit separate instruction.
How is my data protected under GDPR when I use a tax agent?
A tax agent who holds your personal data is a data controller under GDPR and the Data Protection Act 2018. This means the agent must process your data only for the lawful purpose of managing your tax claim, must not share it with third parties without consent, must protect it with appropriate security measures, and must comply with your data subject rights including the right to access, correct, or delete your data. You can exercise these rights by contacting the agent directly.
Can I revoke a tax agent's access to my Revenue record?
Yes. You can revoke an e-linked tax agent's access at any time by logging into the Revenue system and navigating to the Manage Tax Agent section. Revoking the link immediately removes the agent's access to your Revenue record. This does not affect any claim that has already been submitted on your behalf. Your own the Revenue system access is unaffected at all times.
How long does a tax agent retain my personal data?
Under GDPR, a tax agent must retain your personal data only for as long as is necessary for the purpose for which it was collected, plus any period required by law. For tax purposes, Revenue requires records to be retained for six years. MyTaxRebate retains your data for the legally required period and then securely deletes or anonymises it. You can request confirmation of the retention period and your specific data by contacting MyTaxRebate directly at any time.
