This is an exceptional comment.

Especially point A.

I used to work for a company that made health insurance claims benefit management software for first and third party administrators.

We would get requests from clients to do data mining in our databases that was well in excess of what was legal - one example included the fact that they were using genealogy services to build family trees and while they couldn't mine DNA for familial information, surely there was no harm in looking over your distant relatives for diagnosis codes, right?

"We can't do that".

"Why not, it's all in the databases, right?"

To the OP's point, that would oblige the traveler to notify their insurance if they got a text from the airline advising of delays, etc.