Under the CCPA/CPRA, a third party is a person or business that is not either of the following:

  1. One that collects personal information from consumers under the CCPA/CPRA
  2. One to whom the first-party business discloses a consumer's personal information for a business purpose under a written contract that lays out specific stipulations