Disclosure of personal data occurs when the data controller hands over personal data to another data controller for processing. The second data controller must have the right to receive the personal data and a reason for using the data.