From energy rebate to drivers' licences and referendum counts, personal data is being harvested, misused and often stolen.