( if this is held by them they will use it and allow second bodies to use it and the second bodies wont be subject to the same data protection as the defra folks )
Nearly all data is covered by the Data Protection Act, and this will include new recipients.
Of the eight protection principles in the act, maybe 'relevant but not excessive' may apply. i.e. Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed'.
As a data subject, you can ask the Information Commisioner to assess whether the Act has been contravened.
You should be able to get information as to who else they intend to share data with under the Freedom of Information Act, which applies to public bodies. If they are intending to publish this information, then it may not be possible to get it before the publishing date.
The process is to write to them saying what information you require, that you want the information, and giving your name and address. They must reply within 20 days. On failure you may request an independent review, and failing that appeal to the Information Commisioner.
