Replying to my own Q to explain why I'm going on about this.
It seems to me the OP set out to answer the question "Where do I vote?".
And they did this by releasing a whole bunch of personal information on every citizen online. That, no matter how good the encryption or how slight the P.I. is, strikes me as a bad idea.
Who's to say that in 6 months a flaw isn't revealed in the encryption method that leaves it all open? Or in a year there isn't a breakthrought in brute forcing and suddenly it's easy to open? And while you could argue the P.I. is slight (DOB, ZIP and ID only) maybe it's actually very powerful to bad people when combined with other data sets?
Basically, if there was any way to create a data set to answer the question "Where do I vote?" without including any Personal Information (like you can in the UK) that is so much better, because then you have an open data set you can pass around freely in as many ways as possible with no fancy crypto needed and no worries about personal information leaking. You could even print the damn thing and put it up in the town square, no fancy tech needed.
ps. Some people are talking about the question of "Am I registered to vote correctly?". That does require Personal Information in a DB, no way around that. But that's not what the original article was about. That very clearly says "Where to vote? ... how is the catalan government supposed to notify people their assigned polling stations?". Being clear about the question really does help sometimes. :-)