Just been sent a extension for review and it differs quite a bit from the last one I signed (even though it was stated in the original contact that it would be the same terms & conditions)

One of the points is this:-

The Company shall provide, in writing, personal information relating to the Consultant to <agency> within x calendar days of request. Such information may be disclosed to Affiliates, Clients and third parties that work on <agency>’s behalf, such as data processors, inside and outside the United Kingdom, as well as government and regulatory authorities. <agency> processes sensitive personal information only if required to comply with legal obligations or with the Consultant’s consent

Now I'm not sure I'm happy with that, sure I'll let them pass on the NI details for example to HMRC (as required) but why should I allow them to be sent to affiliates and 3rd parties?? Or is just their external admin team for example?