David Hencke reveals that the UK Government’s COVID-19 contract with the data surveillance firm owned by Donald Trump-backer Peter Thiel was approved under an obscure statutory instrument.