---
term: "Authorized third party"
category: "Consent and data rights"
url: https://agenticopenfinance.com/glossary/authorised-third-party
source: AgenticOpenFinance glossary
---

# Authorized third party

> Under the US data rights rule, a third party that has met the authorisation procedure to access a consumer's data.

Under the CFPB's personal financial data rights rule, an authorized third party is a third party that has complied with the rule's authorisation procedures, which include giving the consumer an authorisation disclosure, certifying to its obligations and obtaining the consumer's express informed consent. Those obligations limit collection, use and retention of data to what is reasonably necessary for the product the consumer asked for. The CFPB has since opened a reconsideration of the rule, so current status and compliance dates should be checked on its pages.

Related terms: [Data provider](https://agenticopenfinance.com/glossary/data-provider.md), [Consent](https://agenticopenfinance.com/glossary/consent.md), [Revocation](https://agenticopenfinance.com/glossary/mandate-revocation.md), [Open banking](https://agenticopenfinance.com/glossary/open-banking.md)