third party

A person or group besides the two primarily involved in a situation, agreement, business, etc.

Natural or legal person, public authority, agency or body other than the data subject, controller, processor

an entity that is involved in some way in an interaction that is primarily between two other entities. [Please see note, especially regarding NIST CSRC terms that we might incorporate into this definition.]

a political party organized in opposition to the major parties in a two-party system

someone other than the principals who are involved in a transaction

This is an entity or service organization that may not be legally controlled by a covered entity but might otherwise be legally affiliated with the covered entity that collects PI. In many cases, affiliated entities are also impacted by and should be covered by the originating covered entity's privacy agreements or by applicable legal statutes.