On the one hand, arrangements like these are longstanding and essential: if medicines regulators get a few unusual side-effect reports from patients, they go to the drug company and force them to do a big study, examining – for example – 10,000 patients' records, to find out if people on that drug really do have more heart attacks than we'd expect.