You notice the NHS England/NHS IT model of opting out is not the usual one of
"If we don't have permission we won't acquire and hold the data"
it is the model of
"If you've requested we not have your permission, we'll acquire the data, and add a note that we are not allowed to use it".
Then they failed to add the note, and used it.
It is systemic. Or systmic, perhaps.