Generally, no. Unless I notify the client that the data will be given out, and given chance to participate or withdraw from the project, in order not to violate the Principle of Privacy.
Unless a legal framework is already set, so that the consent is already possible in advance.
