The challenge of opt-outs from NHS data: a small-area perspective