You think that's bad? I ordered two beds from Bensons for Beds (now on my permanent blacklist). One was missing over 50 individual parts.
I called to complain, they wanted all the details known to man. In the end, they refused to send me a kit of the replacement parts (for free) because my girlfriend paid with a card and works in a hospital job where she can't use a phone during the day. They refused to send our replacement parts - to the DELIVERY address that the beds had already been sent to - because of "Data Protection".
Needless to say, I spoke to MANY people at their customer services department that day. When one then eventually phoned me back, they asked if I was Mr D. My response? Sorry, I can't tell you that - Data Protection, you know. (Fortunately THAT guy had a sense of humour and just said "Ah, yes, I'm definitely talking to the right person then!").
Banks do it all the time. I phone them back on the bank number (if it's 0800 of course) and let them chase who it was that needed to speak to me. But even companies are doing this same kind of junk for the simplest of things.
Unfortunately, they ALL have absolutely zero concept of Data Protection anyway, not to mention they really don't care about your security. Why? Well, that side of it is your liability anyway. If someone nicks the banks database, they care about that. If someone finds out your date of birth or they talk to the wrong person, they couldn't care less.