Sounds like cra@pola to me.
Providing they don't intrude on other peoples privacy by giving personal info about some one else eg "x is drunk / insane / lost his medical so you have to do the trip", I don't see a problem.
Why not make your own data protection enquiry about data on yourself? The reason for the re rostering must be recorded somewhere - and it does not have to be on computer to be covered.