What Is Second-Party Data?
Second-party data occupies the middle ground in the data hierarchy. It is, in effect, someone else's first-party data that they share directly with you through a bilateral agreement.
The key distinction from third-party data is transparency: you know exactly who collected the data, how they collected it, and what consent was obtained from the individuals it represents.
No broker sits between the two organisations, which means the data is cleaner, more contextually relevant and carries fewer compliance risks.
The mechanism for sharing second-party data typically involves direct data clean rooms, API integrations or secure file transfers governed by a data sharing agreement. The receiving party gains access to audience attributes, behavioural signals or purchase history that their own platform would never be able to observe. The sharing party often benefits through revenue, cross-promotional reach or reciprocal data access.
In South Africa, POPIA governs how personal information can be transferred between organisations.
Any second-party data arrangement must include appropriate safeguards: the original data collector must have obtained consent that covers the specific downstream use, and both parties must agree on retention limits, data security standards and the purpose of use.
Businesses that skip this due diligence expose themselves to regulatory enforcement by the Information Regulator. A well-structured data partnership agreement is therefore as important as the data itself.
Second-party data is particularly valuable when your own first-party data is limited in scale or lacks certain dimensions you need for audience modelling. A smaller e-commerce brand, for example, might have excellent purchase intent signals but limited demographic depth. Accessing second-party data from a complementary publisher or loyalty network adds the missing dimension without compromising data quality.
Second-Party Data In Practice
A practical example from the South African market: a Cape Town-based travel insurer wants to reach people who are actively planning international trips.
By forming a data partnership with a local travel booking platform, the insurer can access aggregated, anonymised signals indicating recent flight searches and accommodation bookings.
The insurer uses this signal to trigger targeted digital ads to people in an active buying window, rather than wasting budget on broad audiences who have no immediate travel intent.
Both parties benefit: the travel platform earns revenue from the data partnership and can offer advertisers a more compelling suite of targeting tools, while the insurer achieves higher conversion rates at lower cost per acquisition.
The arrangement is fully governed by a data sharing agreement that specifies exactly what data is transferred, in what form, and with what restrictions. This is the essence of a well-executed second-party data strategy: structured, consensual and mutually beneficial.
How second-party data works
Second-party data is, in essence, another organisation's first-party data that you obtain directly from them, usually through a partnership or agreement, rather than collecting it yourself or buying it from an aggregator. It is data the partner collected directly from their own customers or audience, which they then share or sell to you, so it retains much of the quality and directness of first-party data, it comes from a known, direct source that collected it with the audience relationship, rather than the murkier, aggregated origins of third-party data. For example, two non-competing businesses with complementary audiences might agree to share audience data, or a publisher might provide a brand with data about its audience. Because it comes directly from the partner who gathered it, second-party data is generally more transparent, accurate and reliable than third-party data, while extending your reach beyond your own first-party data to a partner's audience, which is its appeal in a landscape where third-party data is declining.
Second-party data in the data landscape
Second-party data occupies a useful middle ground in the shifting data landscape. As third-party data, aggregated from many sources with unclear provenance and consent, declines under privacy regulation and the loss of tracking cookies, businesses are turning to more direct, consented data. First-party data, collected from your own audience, is the foundation, and zero-party data, which customers proactively share, is the most explicit. Second-party data extends this direct, higher-quality approach by giving you access to a partner's first-party data through a trusted arrangement, letting you reach beyond your own audience without resorting to the third-party data that is fading. Its value depends on the fit and quality of the partner's audience and on the data being shared lawfully and with appropriate consent, since privacy obligations apply to using another party's customer data too. Used well, second-party data partnerships let complementary businesses extend their reach with data that is more reliable and transparent than third-party alternatives, which is why they have grown in importance as the industry moves away from third-party data towards more direct, consented sources.
FAQ
How does second-party data differ from third-party data?
Second-party data is shared directly between two organisations with a formal agreement, so you know exactly where it came from and how it was collected. Third-party data is aggregated by a broker from many unknown sources and sold to any willing buyer. Second-party data is generally more accurate, more relevant and carries lower compliance risk.
What are examples of second-party data partnerships in South Africa?
A South African airline sharing customer travel-intent data with a car rental company is a classic example. Similarly, a large retail group might share loyalty programme behavioural data with a non-competing brand. Both parties benefit from a richer audience view without relying on third-party brokers or compromising customer trust.
What are examples of second-party data partnerships?
Typically arrangements between non-competing businesses with complementary audiences that agree to share audience data, or a publisher providing a brand with data about its audience. The common feature is one party sharing the first-party data it collected directly with another, through a trusted, lawful agreement, to extend reach beyond each party's own audience.