Insurance data privacy & ethics - how far does the market need to go?

U.S. Federal laws such as HIPAA and Gramm-Leach-Bliley have carve-outs for the use of personal consumer data for fighting insurance fraud and prevention, in turn the current enacted state consumer data privacy laws have exemptions and exceptions to those federal statutes.
As long as those same exemptions and exceptions are in future state privacy laws insurance companies will have the ability to access and operationalize actionable intelligence from consumer data sources.