Person A — Data Owner

Person B — Authorized Recipient

Person C — Unauthorized Recipient

Interaction Explanation