Transmission is the disclosure of personal data to a recipient by passing it on or making it available for retrieval.
Recipients and third parties
A recipient is any body to which data is disclosed. A third party is a recipient other than the controller and its processor. Passing data to a processor is not a transmission to a third party, but requires a data processing agreement.
Requirements
Every transmission to third parties is a separate processing operation and requires a legal basis. If the transmission goes to a third country, the requirements of Arts. 44 et seq. GDPR also apply.
Data subjects must be informed of the recipients or categories of recipients.
Legal provisions
- Art. 4(2) GDPR
- Disclosure by transmission as a form of processing.
- Art. 4(9) and (10) GDPR
- Definitions of recipient and third party.
- Art. 13(1)(e) GDPR
- Information about recipients.
- Art. 44 GDPR
- Transfers to third countries.