Yes they do if they are self insured, meaning they are literally the insurance company taking on the risk. This is the norm for large companies.
Where is the goal post? And no even they wouldn't have individual data, even if they self-insured. They don't manage the claims themselves, that's ridiculous.
Do you have any source for your suggestions, or is this just a random hypothetical?