Compliance Glossary

The GDPR defines a Third Party as any entity excluding the data controller, data subject, or processor who, under authorization of the processor or controller, is allowed to receive and process personal data. A third party is not a processor that works on behalf of the data controller. They are not restricted by the controller. Instead, they are allowed to receive and process data any way they deem fit. An example of a third-party under the GDPR is a social media plugin that is authorized by the data subject to collect data and process it appropriately.