This is exactly why large stores of data should be considered a liability and NOT an asset. Keep as little of it as possible and for the least amount of time possible.
I'm actually a bit confused about why they would need to store the medical test data and medical questionnaire information at all - can't you boil those down to "suitable" and "not suitable"?