One of my fields in the RegenCHOICE fields
It's fairly clear that we do need system-wide personal IDs, but not clear how to prevent information from being aggregated surreptitiously if this ID is sent along with enquiry results.