Equifax Privacy Policy

This document is Equifax's consumer-facing privacy policy, governing the collection, use, sharing, and retention of personal information across Equifax's websites, mobile applications, and data services, with stated legal bases including consent, legitimate interest, and legal obligation depending on jurisdiction. The policy states that Equifax collects identifiers, financial data, credit history, Social Security numbers, device information, browsing activity, geolocation data, and inferences derived from consumer profiles, and authorizes sharing this information with affiliates, service providers, business partners, data brokers, marketing partners, and government or law enforcement entities. Notably, as a consumer reporting agency, Equifax occupies a dual role: it is both a data collector subject to general privacy law and a regulated furnisher and user of consumer report data under the Fair Credit Reporting Act, creating a layered compliance structure that the policy acknowledges but does not fully delineate in terms of which rights apply under which framework. The policy references compliance with CCPA and CPRA for California residents, GDPR for EU and UK data subjects, and state-specific frameworks including Virginia, Colorado, Connecticut, and Texas; enforcement and applicability of stated rights depend on the jurisdiction of the consumer and the specific Equifax entity involved.