I'm no conspiracy theorist or, normally, deconstructivist. But NHS England's response strikes a chill.
The issue is not about NHS and HSCIC profiting from providing data to outside organisations. Indeed, if my personal information is to be sold on, I'd prefer it if NHS were the ones to profit, rather than the (presumably commercial) outside organisations they're selling it to.
And the repeated insistence by NHS England that they won't sell my personal information for the "purposes of selling or administering any kind of insurance" is too neatly-constructed a phrase to be at all reassuring: the only construction I can put on it is that it'll be OK to sell my data to anyone else for any other purpose, and to insurance companies to do anything they like so long as it's not "selling or administrating".
Neither assurance changes the basic fact: NHS and HSCIC clearly envisage selling my personal medical information with my name and NHS no attached and details of my "sensitive data." Who could possibly want to know that stuff about me personally unless they intended me harm?
And by the way, you've got four weeks only to opt out. And the leaflet doesn't tell you that.