Bright Grey and Scottish Provident have warned that insurers could be "shooting themselves in the foot" by changing the way they request medical evidence from GPs.
HSBC subsidiaries have been fined a total of £3m for failing to protect their customers' personal data.