A third party, in legal terms, is anyone who falls outside the two primary participants in a legal relationship. Who is considered a third party depends on which relationship you’re looking at: in a contract, it’s anyone who didn’t sign; in a lawsuit, it’s someone outside the original plaintiff and defendant; in insurance, it’s a claimant who isn’t the policyholder or the insurer; in data privacy, it’s a company that receives your information without having a direct relationship with you. The label matters because it changes what a person can demand, what they can be forced to pay, and what rights they can enforce.
Third Parties in a Contract
The first and second parties to a contract are the people or entities who actually sign it. Everyone else is a third party. The default rule, which lawyers call privity of contract, is that if you didn’t sign, you can’t enforce the agreement and you aren’t bound by it.
Intended Beneficiaries Can Enforce; Incidental Ones Cannot
The main exception is the third-party beneficiary. These are people the signing parties specifically meant to benefit, even though the beneficiary never put pen to paper. Life insurance is the classic example: the policyholder and the insurer form a contract that names a beneficiary, and that beneficiary has the legal right to collect the payout.
Courts draw a sharp line between two kinds of beneficiaries:
- Intended beneficiaries are identified in the contract and are the point of the promised performance. They can sue to enforce the contract even though they aren’t parties to it.
- Incidental beneficiaries receive some indirect windfall but were never the contract’s purpose. A neighborhood whose property values rise because of a construction deal between a developer and a builder is benefiting incidentally. They have no enforceable rights.
An intended beneficiary’s rights also have to “vest” before they can enforce anything, which generally happens when the beneficiary learns of the promise and relies on it, agrees to it in the way the contract specifies, or files suit. Until then, the original parties can modify or cancel the beneficiary’s interest without asking.
Indemnification Clauses and Third-Party Claims
Many commercial contracts contain indemnification clauses that allocate risk when someone outside the agreement brings a claim against one of the signatories. One party agrees to cover the other’s losses and legal costs if a third party sues over something connected to the contract. These clauses often include a duty to fund the legal defense itself, which can kick in the moment a lawsuit is filed, whether or not the claim ultimately has merit. If you are signing a contract with an indemnification provision, pay attention to which third-party scenarios trigger it and whether the obligation runs one way or both.
Third Parties in a Lawsuit
Impleader: Pulling an Outsider Into the Case
When a defendant believes someone outside the lawsuit is actually responsible for all or part of the plaintiff’s claim, the defendant can file a “third-party complaint” to drag that outsider into the case. Under Federal Rule of Civil Procedure 14, a defendant can do this without the court’s permission if the complaint is filed within 14 days of the defendant’s original answer. After that window closes, the defendant needs the judge’s approval.1Legal Information Institute (LII) / Cornell Law School. Federal Rules of Civil Procedure Rule 14 – Third-Party Practice
The labels get specific. The original defendant becomes the “third-party plaintiff,” and the newly added outsider becomes the “third-party defendant.” Once in the case, the third-party defendant can assert defenses, file counterclaims, and bring claims directly against the original plaintiff if those claims come out of the same underlying events.1Legal Information Institute (LII) / Cornell Law School. Federal Rules of Civil Procedure Rule 14 – Third-Party Practice
Third-Party Liability in Personal Injury
The primary parties in a personal injury case are the injured plaintiff and the defendant alleged to have caused the harm. Legal responsibility often reaches further.
If a delivery driver causes an accident while on the job, the driver’s employer can be held liable as a third party. The doctrine is called respondeat superior, and it holds employers responsible for wrongful acts their employees commit within the scope of employment, regardless of how closely the employer was supervising at the time. It does not reach independent contractors, only actual employees. Courts weigh factors like how much control the employer exercises over the work, whose tools are being used, and whether the work is part of the employer’s regular business.
Employers aren’t the only third parties who turn up in injury claims. A vehicle manufacturer can be pursued as a third party when defective brakes cause a crash. A government entity responsible for maintaining a dangerous road can be liable. In many states, a bar that serves alcohol to someone visibly intoxicated can face a third-party claim if that person later causes a drunk-driving accident.
How Fault Gets Split Among Multiple Parties
When an injured person has valid claims against both a primary defendant and a third party, courts must divide responsibility. Under joint and several liability, which still applies in many jurisdictions, each liable party is independently responsible for the full amount of the plaintiff’s damages. The plaintiff can collect the entire judgment from whichever defendant has deeper pockets, and that defendant can then seek reimbursement from the other wrongdoers. Some states have moved away from this approach and apportion damages proportionally based on each party’s share of fault.
Third Parties in an Insurance Claim
Insurance has its own party framework. The policyholder is the first party, the insurance company is the second party, and the third party is someone outside that relationship who makes a claim against the policyholder’s coverage.
The most common example is a car accident. If a driver causes a collision that injures another person, the injured person is the third party. They file a third-party claim with the at-fault driver’s insurer seeking payment for medical bills, vehicle repairs, and other losses. That is different from a first-party claim, where a policyholder taps their own policy to cover their own damages, such as using their own collision coverage after a wreck.
Subrogation
When an insurance company pays out on your behalf, it often acquires the right to recover that money from the third party who was actually at fault. The process is called subrogation. If you’re in an accident that wasn’t your fault, your own insurer may pay for repairs and medical bills to get you taken care of quickly, then pursue the at-fault driver’s insurer behind the scenes to recoup the costs. A successful subrogation can produce a refund of your deductible. If you settle directly with the at-fault party without telling your insurer, you can inadvertently waive those subrogation rights and create problems with your own policy.
Third Parties in Data Privacy Law
Privacy regulations define “third party” with unusual precision, and the definitions aren’t quite what most people expect.
Under the EU’s General Data Protection Regulation, a third party is any person, company, or government body other than the individual whose data is being collected, the organization controlling the collection, the organization processing the data on the controller’s behalf, and anyone working directly under either of those organizations’ authority.2GDPR-info.eu. Art 4 GDPR – Definitions A company that handles data under direct contract with the collector is a processor, not a third party, for regulatory purposes.
The California Consumer Privacy Act takes a similar approach, defining a third party by exclusion: anyone who isn’t the business the consumer intentionally interacted with, a service provider working for that business, or a contractor engaged by that business. When a company shares your data with an advertiser, a data broker, or an analytics firm that has no direct relationship with you, those recipients are third parties subject to specific disclosure requirements and consumer opt-out rights.
Third-Party Cookies and Vendors
The first-party/third-party distinction shows up every time you visit a website. A first-party cookie is set by the site you’re actually visiting and handles things like keeping you logged in. A third-party cookie comes from a different domain, usually an advertising network or analytics service embedded in the page. When those third-party servers combine cookie data across many websites, they can build detailed profiles of your browsing. Both the GDPR and the CCPA require disclosure of these practices and, in many cases, your consent before third-party cookies get set.
Vendors occupy a related space. Payment processors, shipping companies, and cloud providers all handle customer information behind the scenes, and whenever a business hands data to one of these companies, it creates a sharing relationship that privacy regulators look at closely.
Third Parties in Tax Reporting
If you sell goods or provide services through online marketplaces, freelance networks, or ride-hailing apps, the company processing your payments is likely what the IRS calls a “third-party settlement organization.” Federal law defines this as the central organization with the contractual obligation to pay the people participating in a third-party payment network.3Office of the Law Revision Counsel. 26 USC 6050W – Returns Relating to Payments Made in Settlement of Payment Card and Third Party Network Transactions
These organizations must report your earnings to the IRS on Form 1099-K when two thresholds are both met: your gross payments for the year exceed $20,000, and you have more than 200 transactions.4Internal Revenue Service. IRS Issues FAQs on Form 1099-K Threshold Under the One, Big, Beautiful Bill If you fall below the threshold, the income is still taxable; the platform simply isn’t required to send you the form.