What 23andMe and other genetic testing tools can do with your data – Vox:

“companies with fewer than 15 people are exempt from this rule, as are life insurance, disability insurance, and long-term care insurance companies — all of which can request genetic testing as part of their application process. “