Compare Google's Privacy policy:
> We will share personal information with companies, organisations or individuals outside Google if we have a belief in good faith that access, use, preservation or disclosure of the information is reasonably necessary to:
> + meet any applicable law, regulation, legal process or enforceable governmental request.
> + enforce applicable Terms of Service, including investigation of potential violations.
Or Facebook's:
> We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; or to prevent death or imminent bodily harm.
Or Apple's:
> We may also disclose information about you if we determine that disclosure is reasonably necessary to enforce our terms and conditions or protect our operations or users.
Or Reddit's:
> We may share information if we believe your actions are inconsistent with our user agreements, rules, or other Reddit policies, or to protect the rights, property, and safety of ourselves and others;
Ironically, the BBC is somewhat clearer about whom the information might end up being disclosed to.