I was quite surprised to find that the NHS uses password-less logins for its "Flexible Worker Portal":

https://erecruitment.nhsponline.nhs.uk/Portal/LoginForm.aspx

So all you need is the DoB, email address and postcode of someone, and you can view their private information. Genius.