It is a violation of Australian privacy law to collect private medical information, which is specifically designated “sensitive information”, without a damn good reason. Is anyone making a noise about this?