UK test and trace service did not complete mandatory privacy checks