Nothing to do with data protection as such, Caran. You can design systems which cater for privileged access. The answer is that the IT systems on which successive governments have spent billions have been designed by out-sourced and very expensive incompetents.
We went into central London two years ago for an operation on my wife's eye. This at the recommendation of the GP and a referral to an eye specialist at the local hospital.
Pre-Op interview:
Them: Do you have a list of your wife's medications?
Us: No, but you will find all of it on her records at the local practice.
Them: Can't see that. Cancel Op. Arrange for different day. And do not[i forget the list.
Another specialist hospital treating my wife for COPD. First visit (yes, you've guessed, list of medications) [i]and[i] fill in form (paper) name, address, next of kin blah, blah, blah.
Six months later same hospital. No, didn't want meds, but still [i]required] name address next of kin and there's a pen.
I hold up paper in left hand. I'm wearing the "Been there, done that" T-shirt.
Can't help myself: "There's a squarey thing in front of you along with a flatty thing with numbers and letters on it. Could have sworn that's a computer. But you're going to tell me it's something else, aren't you? Let me guess, it's not a sandwich-maker is it?".
I feel rather bad, because the admin person looks up, shakes his or her head sadly and says "Yeah, I know, don't tell me about it.".