That would also be illegal in the European Union. The Data Protection Directive requires all uses of personal data be opt in (ie you cannot use someone's personal data for a purpose they didn't opt in to), that personal data be kept accurately (you cannot say that someone is looking for a job if they are not) and it also limits how companies can contact you (so the recruiter would not be legally able to contact you nd they found a job)
I think it would also be illegal to share that personal data with other bodies (so the restaurant cannot give the business cards to someone else). It's all kinds of illegal.
