Or how about the other way? If you know when your blood is used and where, you might be able to make assumptions about who is getting transfusions. Granted that's probably small potatoes compared to all of the other privacy concerns in health, but hopefully this program is optional for the recipients.