Can a company share my data with third parties without consent?
How the answer differs across 9 jurisdictions
CanadaFull article No, a company cannot share your personal information with third parties without your valid, informed consent under Canadian federal privacy law.
AustraliaFull article Yes, it is likely a breach of the Privacy Act 1988 (Cth) if a company uses your personal information for a purpose different from the one they disclosed at collection, unless an exception applies.
IrelandFull article Under Irish law, a company transferring your personal data outside the EU must ensure an adequate level of protection, using approved safeguards like Standard Contractual Clauses or binding corporate rules.
SingaporeFull article Under Singapore law, a company must obtain your consent and ensure comparable protection before transferring your personal data overseas.
European UnionFull article No, it is generally illegal for a company in the EU to transfer your personal data to the US without adequate safeguards, such as an adequacy decision, appropriate safeguards (e.g., SCCs), or a valid derogation.
IndiaFull article Yes, a company can transfer your data outside India, but only if certain conditions under the Digital Personal Data Protection Act, 2023 are met — including adequacy determination or valid contracts.
South KoreaFull article In South Korea, a company generally cannot share your personal data with a third party without your prior, explicit consent — unless an exception under the Personal Information Protection Act applies.
No, it is not lawful for a UK company to transfer your personal data outside the UK without appropriate safeguards, unless an exception applies.
JapanFull article Yes, consent is generally required to provide personal information to third parties in Japan, unless an exception under the Act on the Protection of Personal Information applies.
Read Full Articles
CanadaCan a company share my personal information with third parties without telling me?
AustraliaA company is using my personal information for a purpose different from what they told me. Is this a breach?
IrelandA company transferred my data outside the EU.
SingaporeA company transferred my data overseas without informing me.
European UnionA company transferred my data to the US without adequate safeguards. Is this legal?
IndiaCan a company transfer my data outside India?
South KoreaA company shared my data with a third party.
UKA company transferred my data outside the UK without safeguards. Is this lawful?
JapanIs consent required to provide personal info to third parties?Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.