I'm probably just as skeptical of those pesky private-sector foreigners as you are. But I don't expectations of domestic government-controlled entities being any better.
The UK government can pass laws and use contracts to legally safeguard the data, if they want to.
It's not that I expect government to be better, but I wish it was, and I wish the technical and project people building these systems took this stuff more seriously.
The UK government can pass laws and use contracts to legally safeguard the data, if they want to.