It depends on the circumstances really but I don’t think it would be considered illegal if it were a relative also if it were disclosed to ensure the safety of an individual, that too would be deemed ok. It’s a really grey area to be honest as the general data protection regulations only really cover businesses rather than information within families and personal relationships.
