25b. Should the data holder verify that the user or third party has a valid legal basis under the GDPR before transmitting the data?

In situation when data is shared between two controllers, each controller must be able to demonstrate their own compliance with the GDPR in accordance with principle of accountability. Each controller must ensure that they have sufficient information to do so. The controller should cooperate to share strictly necessary information to allow to demonstrate the compliance by each of them.