Re: "The UK enacted GDPR through the Data Protection Act 2018 (DPA2018)"
I hate to tell you but that is more normal than you imagine. Not just UK but all over the world.
Big pharma use a lot of public funded research and then surround the result in layers of patents etc. This is just a bit more obvious than most.