Indirect use of discrimination factors that are outlawed is inexcusable and needs to be avoided by due diligence by insurer and indeed the firm supplying the data. Any decent carrier would not want to cross those red lines anyway – and that is even if the data company involved is not itself subject to regulatory oversight and/or consumer protection laws. Moral: act with integrity and choose your business partners carefully.