Whilst an information controller’s personnel to whom details is disclosed might be a “recipient”, they will often not be a “third party”. This is because the worker will usually be acting of their employment capability, and so will likely be performing on behalf of the data controller.An organisation engages a firm wh