Yeah,

But that's just people being scared of the data protection act.

Its not like they can't. Its not different from a direct debit, really.

After all, how many times have you had a cold call that goes:

"Hi, I'm calling from your bank"
"Hello"
"For data protection, can you tell me the first line of your address, and date of birth"
"No, you phoned me. I know who I am. Tell me YOUR address, and date of birth."
"I'm afraid I can't divulge that"
"Then nor can I, goodbye."