Recommendations for what the UK NHS should do to allay fears of misuse of people's medical records.

I think this does not go far enough. No companies should be given access to any of this data. We can't trust pharma companies to investigate the effects of their own drugs, so that work should be done by universities with no direct contact with the company.