It&#x27;s a grey area legally, and is usually prevented by ethics committees and industry bodies.  Practically, if you collect the information you run the risk of a large anti-discrimination suit down the track.
The usual proxy for race&#x2F;religion is first name, last name and zip-code - name clustering gives very strong risk differentiation (I crunch numbers for insurance companies).