Third Party* 

IMI Code of Practice: Any natural or legal person other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the data. ISO: any natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the data.