It is personal data:
It is disclosing to a 3rd party information about a contract between the company and James that James would reasonably expect to be kept confidential.
There is no argument to support disclosing it on the basis if somebody purporting to have had their own contract with...