A UK NHS software developer working on a COVID19 app decides to ask for some programming help from an old friend who does not work for the NHS. He emails a copy of some real patient records to his friend's personal email address so that she can use it in testing. Identify a legal, an ethical and a professional issue with their behaviour. [3 marks max 60 words]