During my first annual enrollment with the company, I have received a letter from HR department that I need to provide the medical history for myself and my dependents before they will renew insurance. I live and work in Ohio, United States.
Previously I have worked in a healthcare industry and I know how strictly HIPPA related information should be guarded and I don't understand why I would be forced to willfully give up such information to a third party company that will share it with insurance brokers, who in turn will share it with an unknown number of companies.
Since I'm sort of a DBA, and I know my way around SQL Server, I know how easy it is for DBA to get any data they want if a company is not doing their job.