Thanks radgirl.
I have sent the form to HR but got them to confirm in writing that they have procedures in place to ensure data protection and that the information is not used for any purpose other than the health insurance application. At least if they try to use it for anything else, I have that in writing for the subsequent action!!