Over the past few months I have had several banks (and other financial institutions) contact me by telephone and want to confirm who I am by asking me a series of security questions. They have all claimed that they cannot discuss the matter they have called about unless I go through security, under Data Protection.
Needless to say, in all cases I have refused to offer any answers to their security questions and the call has been terminated (by me).
The scary thing is that in all these cases, the call from the bank was genuine and the person who called thought I was being unreasonable in saying that I do not give out personal information over the phone to anyone I do not know, who has called me.
Presumably, the majority of people who receive these type of calls willingly offer their personal details, otherwise there would be not be the surprise when I refuse to do so.