It is still personal data and theoretically regulated in Europe at least. It is hard for me to see how the information about non-users is legitimate from my understanding of UK data protection law but maybe they just stay inside the Irish law (which I know even less about).