The ICO has found the 1.6 million patient records shared between the Royal Free and Google’s DeepMind did not comply with data protection law.