EU Data protection law is not about "data in the computer sense" but personal information. It's not related to computers per se at all. If someone can just ring

EU Data protection law is not about "data in the computer sense" but personal information. It's not related to computers per se at all. If someone can just ring up and ask for personal information, that would be against the law. If customers personal details are written up in walls on their public offices, that would probably be illegal aswell.