Health data is usually the highest level protected data under most laws. It's not about just insurance. Part of the problem is once data is out there, it can be used by any shady person.

You can be discriminated against a job based on health records. Scary diseases like AIDS and TB make it hard for unskilled labor to land a job since it's so easy to discriminate. Pregnancy history may hurt women who are in countries with more generous maternity leave.

Mental health history will hurt just about everyone - who wants a worker who can claim ADHD, depression, anxiety, etc as reasons to be unproductive?

Then people will simply deny getting diagnosed for fear that they may uncover something that puts their jobs at risk. That hurts the medical system as a whole.

Combine with weird stuff like eugenics. What if we identify a possible rapist gene and neuter them in advance? Or bar people with a klepto gene from working in finance? You may live in happy, sane, democratic societies today, but it may not be the case 30 years from now.

> You can be discriminated against a job based on health records.

Just to make this clear, probably EU-wide, you can't legally be discriminated against. However, it's gonna be hard to prove leaked data won't be illegally integrated in e.g. ATS models, or was attributed as skill issue when it popped up during manual background checks.

Although, infectious disease like HIV or dystopian scenarios like eugenics are probably the classical discrimination examples for these privacy implications, I don't think they are very likely to be discriminated against (outside of jobs where discrimination is legal and require disclosure anyway, e.g. health workers, food industry etc.). It's easy to dismiss those worries, since most people aren't affected. But common issues with mental health (e.g. depression), hidden disabilities and chronic disease (e.g. PMS), or potentially severe recurring disease (e.g. cancer) realistically are going to be much more impactful. Everything which statistically increases chances to fall out the work force due to health reasons - especially in combination with strong labor protections.

I once had to threaten to resign from a job (in the EU, pre-Data Protection Act) over the data handling of evidence of one of the things in your comment.

I think this has been something people have had an instinct about forever, and the only reason I had to threaten to quit was because of a misunderstanding of the level of data safety involved; put simply it was not common knowledge that socket connections could be snooped and that targeting a popular service would be easy for a malicious person to do. (This was before SSL was efficient or easy to manage, and in the days when only payment screens were encrypted).

Once the message was across, everyone's objectives were aligned again.

Health information is deeply private because disease is entangled with shame/weakness/vulnerability/taboo/intimacy.