Legal rules and industry norms: The impact of laws restricting health insurers' use of genetic information