The NHS data grab explained