IP
Strikes me that the IP for each patient's data rests with each patient.
The internal NHS text here treats it as the NHS's own work.
Methinks a class-action lawyer could tear them a new arsehole*.
.
* (they always make room for more of them on their consultative boards)