My employer is getting quotes from a new insurance co. to get better rates. She's asked all employees to fill out an Employee Enrollment form from the prospective ins. co., (which is a VERY detailed medical history of myself & family). She says the rates depend on employees filling out this form. I understand if an ins. co. wants to see if they are about to insure a bunch of unhealthy people, however, the employer is asking us to return these forms with our personal medical information directly to HER. Is this legal? I guess w/ our consent it might be, but I personally don't think it's any business of our employer to view our private health info. If we send it ourselves, directly to the prospective new insurance company, can that company release the information back to our employer?