Taxpayers' personal financial data could be shared with private firms and researchers, Revenue & Customs says, despite concerns over privacy and security.