Welcome to WebmasterWorld Guest from 18.104.22.168
Forum Moderators: webwork
What level of legal exposure is thus developed?Technically, the site owner is liable.
You may be able to rely on legitimate interests in order to lawfully disclose personal data to a third party. You should consider why they want the information, whether they actually need it, and what they will do with it. You need to demonstrate that the disclosure is justified, but it will be their responsibility to determine their lawful basis for their own processing.
You should avoid using legitimate interests if you are using personal data in ways people do not understand and would not reasonably expect, or if you think some people would object if you explained it to them.
When you turn on privacy-enhanced mode, YouTube won't store information about visitors on your website unless they play the video.