Transcript Processing personal health data: the regulator’s perspective