Wasn’t NHS data anonymised, split into sets and sold a decade ago, then some corp bought multiple sets of the data and combined them easily, de-anonymising it?