However, none of these parties are sharing data with each other. So, if one party has defective controls, it does not affect other parties since there are no links between them.
But if a Third Party receives data from the external party with defective controls, that Third Party is now exposed to potential liability and disruption of operations.