Why is that disappointing? Are charities and NHS trusts that help trans people above the law?
They're serious privacy violations because of the nature of the data that was exposed. We're also only talking about two organizations, both of which did have legitimate privacy violation incidents.
You're drawing conclusions based on statistically meaningless sample sizes.