Or could that be?
"It added that TPP and NHS Digital would "ensure that testing and assurance of patient data extracts is enhanced" in future to prevent similar errors."
"Ensure that we actually test*"
I suspect a new recruit has been hired and spotted it due to fresh eyes with nothing to lose. Others may have reported it before but been ignored by senior management. I've seen that before. Having reported an issue 3 months before at the NHS, then been given a bollocking 3 months later about said issue, until I pointed out the e-mails I sent 3 fucking months earlier at which point they backed down. Really I should of asked for an apology and then walked but I needed the money.
*Obviously just jossing. I don't want to be sued.