After all the fuss they've walked into by now you'd have expected them to have learned some lessons.
*****
Lessons were learnt, unfortunately the lesson wasn't sale of patient data is bad, it was don't let privacy campaigners find out about the scheme ahead of time.