; or (B) information related to— (i) a particular medical condition or a health record; or (ii) the religious affiliation of an individual. (7) Third party (A) In general The term third party means, with respect to a covered entity, a person that— (i) is— (I) not related to the covered entity by common ownership or corporate control; or (II) related to the covered entity by common ownership or corporate control and an ordinary consumer would not understand that the covered entity and the person were related by common ownership or corporate control; (ii) is not a service provider used by the covered entity to receive personally identifiable information or sensitive personally identifiable information in performing services or functions on behalf of and under the instruction of the covered entity