Oh, it's against the law! Well that's ok then, companies never break laws.

In reality, there will be (and probably already is) an impenetrable web of "data aggregators" buying genome data from other aggregators who are buying it from still other aggregators, so that the info will be thoroughly laundered by the time it actually gets to the insurance company to hike your premiums. This both obscures its true origin and lets there be a little contractor to throw under the bus when discovered and deflect blame. Don't fucking kid yourself: if personal genome data is useful, it will be used, no matter what the law says.