preamble_48
(39) Whereas certain processing operations involve data which the controller has not collected directly from the data subject; whereas, furthermore, data can be legitimately disclosed to a third party, even if the disclosure was not anticipated at the time the data were collected from the data subject; whereas, in all these cases, the data subject should be informed when the data are recorded or at the latest when the data are first disclosed to a third party;
← preamble_47 · All articles · preamble_49 →
Source: EUR-Lex (Cellar) · retrieved 2026-10-09 · Text as adopted (Official Journal); later amendments are not incorporated in this text.