Spain's own data protection agency found that laws which force hotels and travel agencies to collect tourist data including passport and bank card information break the European Union's rules ...