He's wording it all very carefully, isn't he?
Going back to the Health and Social Care Information Centre (HSCIC) which will actually hold the data, here's some more from their Service Charges 2013/14.
"We do not charge for data itself but do apply charges to cover the costs of processing and delivering our service."
So Mr Lewis is correct that the data is not being paid for - but the service is.
Second, he slithers very quickly onto just anonymised data for medical analysts. Well and good, but not what we're concerned about. He also says "They are legally prohibited by the DPA from attempting to re-identify any patients". But it looks like customers can ask for the data already identified.
Herewith the full list of HSCIC products from that link:
Tabulation: A statistical table of aggregate data.
Bespoke extract - pseudonymised: A one-off extract tailored to the customer?s requirements of specified data fields containing no patient identifiable or sensitive data.
Bespoke extract - containing personal confidential data: A one-off extract tailored to the customer?s requirements of specified data fields containing patient identifiable data, sensitive data items or both.
Standard extract: Cumulative data for the financial year to date, delivered on a monthly basis via a subscription service. Users sign up to receive a year?s worth of data, delivered in monthly increments
Bespoke data linkage: A bespoke service linking one or more data sets held by the HSCIC to data supplied by the customer.
Patient status and/or tracking: Products designed to enable customers to receive one-off or on-going notifications of mortality and morbidity events affecting a specified patient cohort.
List cleaning: Validating demographic data to ensure it is accurate and improve linkage outcomes.
Prices for patient status and patient tracking include £2.26 for manual matching per record, and £3.78 for ad hoc matching per record. That's clearly about individual patients.
Interesting, a standard data set containing no personal confidential data is charged at £630, while a standard data set that does contain personal confidential data is £1094. Obviously the latter is more valuable to the customer - but if only the processing is being charged for, I wonder why removing personal data takes less processing than not removing it?