Defined in the law · GDPR Art. 4(10)
Third party
In plain English
Anyone other than the data subject, the controller, the processor and the people authorised to process the data under their direct authority.
The definition in the law
‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.