The INGESA system has a “very high initial risk”. Its data protection analysis is “insufficient and inconsistent” and may discourage patients from seeking necessary healthcare.