. . . "They have raised strong concerns that private and personal records could be bought and sold by organisations such as pharmaceutical companies." .