Third party
A third party is any natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data. When personal data is shared with third parties, this must be disclosed in the privacy notice, and a lawful basis must exist for the disclosure.
DPA reference
Data Protection Act 2020, s.2
Related terms in Key concepts
Anonymisation
Altering personal data so that individuals can no longer be identified, directly or indirectly.
Automated decision-making
Making decisions solely by automated means, without human involvement, that significantly affect individuals.
Beneficial ownership
The natural person who ultimately owns or controls a legal entity.
Biometric data
Unique physical or behavioural characteristics used to identify an individual, such as fingerprints.