I am using WLAN in the place I live. The same one that many other residents use. It is password protected, but once you login, everyone is still broadcasting their data to me also. Is it ok for me to sniff that data too?
Yes, why not? If you are sending data in the clear to untrusted networks you're a complete idiot. Presumably that wifi is either a LAN where all the clients are trusted (so everyone trusts you not to do bad things with their data), or it is an internet connection, which is inherently an insecure network so anything passing over it is liable to be intercepted (often legally required to be intercepted and logged by third parties in some jurisdictions).
In the same way, would it be ok for me to plug-in to your internet connection outside your house and sniff that data too?
Yes and no. The internet is an insecure public network, so I have no real expectation for privacy. *However*, in the case of my hard-wired internet connection, I am not blasting data out into the public environment, so by tapping into it you are either tresspassing on my property (to connect to my network) or you are tresspassing on the telco's property (their copper cables), both of which are crimes.
I mean, it's obviously your fault since you didn't use VPN.
I don't need to use a VPN. Protocols I use that carry sensitive data are encrypted (e.g. ssh, https, imaps, etc). And yes, if I shoved some sensitive data in the clear over an insecure network I would only have myself to blame if someone intercepted it. (Note: if someone captured my credit card details and used them fraudulently then, whilst it would've been my fault that they got the credit card details, they are still breaking the law by using them, so I would expect them to be arrested. If they captured the details and didn't use them for anything illegal then that's just tough for me isn't it?)
And, would it be OK for ISP's and VPN providers to sniff data that goes across them?
Not sure what you mean by "VPN provider" since pretty much all sensible uses of VPN is between trusted networks (so you inherently trust the other party to not do anything bad with your data).
I would have a problem with ISPs profiling my traffic (e.g. Phorm), and I do have a real problem with legislation that forces ISPs to do this (the security services shouldn't be interested in what law abiding citizens are doing). However, as mentioned above, the traffic going through my ISP isn't being blasted out over public space. Importantly: This isn't what Google was doing - they were capturing a few packets from random in-progress connections while driving past. They would've been lucky to get any kind of useful data out of a fraction of a percent of the packets they caught, let alone tie it back to an individual and profile their browsing habits.