Linklaters
They produced an analysis for the Royal Free, see https://s3-eu-west-1.amazonaws.com/files.royalfree.nhs.uk/Reporting/Streams_Report.pdf.
I have read the foreword, the management summary and the bit tacked on about GDPR.
Then I got bored.
It would seem that any use of patient personal data for purposes other than those explicitly set out in the contract will be illegal, either by DeepThroat or Google.
Doesn’t mean they won’t do it though.
Also, should that AWS s3 bucket have been open?