Veterans have launched a class action against the department for ‘mass and routine sharing’ of their medical records over 20 years. How common is this?