driller
my life my word
I've worked in Information Security and I think the host club giving this data to the Albion could be in quite a sticky position.
Curiously, however, those who don't attend are unlikely to be able to take action since, as they didn't attend the host club does not have any entrance scan data on them. It's only those who do attend that the host club has data on, and seems to be passing to the Albion.
I might pursue Bournemouth with the ICO on this, because I'm interested to see how it plays out.
Edited my post