“So it seems patients are also being denied their legal right to opt out”
Based on what legislation? The NHS, Police, government, councils etc. have a broad exclusion in the UK DPA/GDPR so don’t have to legally offer you an opt out under those, nor do they have to do any other things within them.