Data laws in EU mandate that a company has to tell you every single entity it has shared your data with, regardless of the sector they operate in.

What you're referring to is that a bank does not require to tell you whether your account is going through specific checks (anti laundering and such).