You could potentially make DNA a 'protected class' of data, implying insuarance companies cannot look at it in their decision making, same as something like race.
We do basically have this, kinda, with not being able to discriminate based on pre-existing conditions.
The law however is only as good as it is being enforced. And if recent events is anything to go by, not having this data is generally the strongest protection.
