From Wiki:
In October 2015 the company was fined £130,000 for selling patients' personal data to international scammers.[28] The Information Commissioner's Office found that the company had sold patients' names and addresses without permission. They were not accused of passing on medical...