Can you get around the law by phrasing a question to 23andMe. A health insurance company could call them up and ask if so and so have genes that has an increased risk of contacting x disease ? Technically they are not selling the information so they are not breaking any laws but it's still valuable to the insurance company.