Are they exempt from GDPR? A high res dental xray is definitely personally identifiable information... If the manufacturer owns the rights then that would put it outside the NHSs exemption right?