Health research and systems’ governance are at risk: should the right to data protection override health?