The point of laws is that T&Cs don't matter if the law has something to say. If the law e.g. were to criminalize sharing health information in this way, then it doesn't matter if the users agreed; you still go to prison for doing it.