DeepMind's data deal with the NHS broke privacy law