Is the data subject's consent required to disclose their personal data to another data controller?
ANSWER
The question of disclosing a natural person's personal data by one data controller to another remains independent of whether the data subject has given consent. If a data controller receives a request to disclose a natural person's personal data together with the legal basis for such disclosure, it is entitled to transfer the personal data to another independent controller regardless of whether the data subject has given consent or not. The data controller is also not obliged to obtain such consent from the data subject. No provision of law, whether the GDPR or national law, imposes such an obligation on the data controller.


