I don't think you are correct. It doesn't matter who provides the data.
> If you obtain personal data from other sources, you must provide individuals with privacy information within a reasonable period of obtaining the data and no later than one month.
I was asking for how my data was being processed. An email saying "Please perform action XYZ on this specific user" would, I think, fall under that description.
> If you obtain personal data from other sources, you must provide individuals with privacy information within a reasonable period of obtaining the data and no later than one month.
https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and...
I was asking for how my data was being processed. An email saying "Please perform action XYZ on this specific user" would, I think, fall under that description.