> NHS users just need to accept that their data is going be fed into models

That's fine so long as it goes nowhere else - it's perfectly reasonable for the NHS to have AI models to do their thing, just as the Met Office and others do. Remember years ago Google had a Search Appliance? A rack mount server to put in your business. The NHS should be doing the same with IBM, Deepmind and other models - figure a way to licence and use the technology without sharing any data back whatsoever.

Data for training, helping IBM et al building better models should be 120 years old or more - guaranteed not to contain anyone alive. The restrictions on medical privacy are there for very good reasons, though I tend to the view they don't go nearly far enough for the modern world.