There's only one way to address this on a personal level: don't give any private sensitive information to anyone working in the NHS. If they ask for such, say no and say why. Sometimes you can persuade a health-care professional to make no notes whatsoever on the information that you give them, in that case it might be worth the risk. Make sure you save their name, remind them that regular data leaks from the NHS mean that if they are lying to you, you will find out.
It's a sorry state we're in.