I think once you give your employer your SSN as long as they aren’t actually taking out a line of credit in your name they can just use it.
I’m not sure what guidelines insurance companies use to decide you’re over insured. IMHO as long as you can afford it why should they even care.
We would have to read the privacy act the employee signed when they provided their SSN.