Its totally wrong if companies hand out personal contact info to third parties without your permission, but what can you do about it?
If you "have a go" at your manager or HR department it would possibly compromise your career prospects within the company, and you would be labelled a "troublemaker"
If you took it to law, it would be a lot of aggro for probably just a few hundred pounds compensation, the damage is already done and you would definately be labelled a "troublemaker"
Data protection and employment legislation is necessary, good and effective in the "extreme" cases (opportunists aside of course) but in cases such as this its awkward to do anything effective without damaging your own prospects. Unfortunately he who pays the piper still calls the tune to some extent.