Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“we maintain websites through which individuals can exercise their rights under the California Consumer Privacy Act”
“We will share data only for legitimate purposes, respecting the importance of data in the lives of individuals.”
“We are committed to providing transparency over our collection, use, and sharing of data, and providing you with greater control over your data.”
“we are committed to meeting the obligations of evolving and complex laws granting individuals greater control over their data, both in the United States and internationally.”
“The entity maintaining this website is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS).”
“our Australian Privacy Policy describes how individuals can exercise their rights of access and correction under the Australian Privacy Act.”
This document is Equifax's main privacy policy, covering how Equifax collects, uses, and shares personal data across its businesses. It commits Equifax to being transparent about those practices and to sharing data only for legitimate purposes. Depending on where you live, Equifax provides dedicated websites where you can exercise your privacy rights — including rights under California, Colorado, Connecticut, and Delaware law.
The Equifax Privacy Policy establishes Equifax's stated commitments to transparency over its collection, use, and sharing of data across all of its businesses, and to providing individuals with greater control over their data both in the United States and internationally. The policy consolidates most Equifax U.S. business privacy policies into a single comprehensive statement and describes, at an enterprise level, the types of data Equifax collects and how it is used and safeguarded. Data sharing is conditioned on legitimate purposes, though that term is not defined within the provisions. The policy identifies Equifax as a data broker under Texas law and surfaces the associated state registration requirement, and it directs Australian individuals to a separate Australian Privacy Policy for statutory access and correction rights. Equifax maintains dedicated online channels through which individuals may exercise rights under the California Consumer Privacy Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Delaware Personal Data Privacy Act.
As an individual, this policy tells you that Equifax collects, uses, and shares data about you across its businesses and commits to being transparent about those practices. Equifax states it will share your data only for legitimate purposes and will be transparent about how it uses and safeguards data in its possession. If you are a California resident, you can exercise your rights under the California Consumer Privacy Act through a dedicated Equifax website; residents of Colorado, Connecticut, and Delaware each have a corresponding dedicated Equifax website for their respective state privacy rights. Australian individuals are directed to a separate Australian Privacy Policy to exercise access and correction rights under the Australian Privacy Act.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
5 important changes detected
7 versions captured · Latest change detected by ConductAtlas: September 2026
In an update detected on July 28, 2026, Equifax's Privacy Policy was modified. The change involved the addition of regional language and geographic navigation options to the policy header, expanding …
View change record →Equifax simplified the header navigation structure of their privacy policy on June 10, 2026, removing regional language and location options that appeared before the main content. The updated policy header …
View change record →Equifax updated the navigation structure of its privacy policy on May 13, 2026 by adding a new link to the 'Identity & Fraud Services Privacy Statement' in the opening section. …
View change record →“we maintain websites through which individuals can exercise their rights under the California Consumer Privacy Act”
“We will share data only for legitimate purposes, respecting the importance of data in the lives of individuals.”
“We are committed to providing transparency over our collection, use, and sharing of data, and providing you with greater control over your data.”
“we are committed to meeting the obligations of evolving and complex laws granting individuals greater control over their data, both in the United States and internationally.”
“The entity maintaining this website is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS).”
“We will be transparent about how we use and safeguard data in our possession.”
“our Australian Privacy Policy describes how individuals can exercise their rights of access and correction under the Australian Privacy Act.”
“we maintain websites through which individuals can exercise their rights under...the Colorado Privacy Act”
“we maintain websites through which individuals can exercise their rights under...the Connecticut Data Privacy Act”
“For our United States business, we've consolidated most of our privacy policies into our new, comprehensive Equifax Privacy Statement.”
“we maintain websites through which individuals can exercise their rights under...the Delaware Personal Data Privacy Act”
“Our revised privacy statement discusses how we collect, use, and share data across all of our businesses, and provides greater detail over the types of data we collect.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Equifax has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle California Consumer Privacy Act rights website maintained and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.