I suppose it would be okay for them to collect that information, as long as it wasn't used to set insurance rates or to deny coverage.