Here's the Guardian on the NHS Database:
"The information commissioner, Richard Thomas, warned this year that private investigators were already raiding government and company databases, because the penalties are so weak. Investigations by his staff and police had uncovered "evidence of a pervasive and widespread 'industry' devoted to the illegal buying and selling of such information".
"Mr Thomas said he had identified 305 journalists buying unlawful personal information about celebrities, lottery winners and others. A private detective hired by a potentially abusive husband to track down his wife had posed as a health official. He had "obtained details of the woman's whereabouts by phoning her parents' medical centre and requesting their number to check a prescription". Government databases raided on behalf of insurance firms and private industry, often with the help of staff, have included the Police National Computer, the DVLA's vehicle computer, and those at the Department for Work and Pensions
UPDATE: Here's who to complain to. If enough of us do it, it could put a spanner in the works.