Inland Revenue says the data it’s handing over is anonymised, but experts say the protection is too weak to be effective.