harnessing third parties as regulatory surrogates