No, you are not obligated, this is completely optional. I understand that some people collect this type of data to sell it. I don't know if this is legal or not, but more than one person does this for this very reason.
But aren't they supposed to have people's consent? Because at the end of the day, it's our private data. But of course, one thing is what's supposed to be done and another is what should be done, right? But technically, they're not supposed to be able to see any of our data without our consent, but it's like you say, it depends entirely on each country or state.Well, this depends a lot on local laws. In various countries, many healthcare companies can buy or sell data as long as they are fairly using the data of patients. Unfortunately, in many cases various companies may be involved in selling patient data to scammers who may exploit or manipulate the patients. Scams in the healthcare industry is quite common. In fact, it is more common than many people can think. Therefore, there are certain guidelines related to usage and handling of data, which should be followed by patients.