NHS insists the public's data is safe in the hands of the health service. Privacy campaigners want more detail.