A Bill to prohibit the transfer of personal data by the NHS without the authority of the data subject; and for connected purposes.