California residents have specific legal rights under California privacy law, including the right to know what data Equifax holds about you, delete it, correct it, opt out of its sale or sharing, and limit how sensitive personal information is used.
This analysis describes what Equifax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights give California residents concrete, legally enforceable tools to manage how Equifax collects and uses their personal and financial data, including data used for marketing and profiling beyond credit reporting.
If you are a California resident, you can actively limit how Equifax uses and shares your data, request a full copy of what Equifax holds about you, and correct errors, all of which can help protect your financial profile and limit unwanted marketing. These rights are separate from and in addition to rights you have under FCRA to access and dispute your credit report.
Cross-platform context
See how other platforms handle California Consumer Rights Under CCPA/CPRA and similar clauses.
Compare across platforms →Monitoring
Equifax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the following rights with respect to your personal information: Right to Know, Right to Delete, Right to Correct, Right to Opt-Out of Sale or Sharing, Right to Limit Use of Sensitive Personal Information, Right to Non-Discrimination.— Excerpt from Equifax's Equifax Privacy Policy
REGULATORY LANDSCAPE: This provision reflects compliance with CCPA as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. Key obligations include responding to verifiable consumer requests within 45 days, honoring opt-out of sale or sharing signals including Global Privacy Control where technically feasible, and providing a mechanism to limit sensitive personal information use. FCRA rights are legally distinct and this provision relates to non-FCRA personal information held by Equifax in its capacity as a data broker and consumer products provider. GOVERNANCE EXPOSURE: Medium. California's comprehensive privacy framework is well-established and Equifax as a major data broker and consumer products company is a prominent compliance target for CPPA. Failure to honor consumer rights requests within required timeframes or to implement functional opt-out mechanisms creates regulatory and litigation exposure. JURISDICTION FLAGS: Applies specifically to California residents. However, similar rights frameworks are operative in Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws, meaning the operational mechanisms developed for CPRA compliance should be assessed for applicability to residents of other states. CONTRACT AND VENDOR IMPLICATIONS: Equifax's service providers and data processors must be obligated by contract to assist in fulfilling consumer rights requests, including deletion and correction, within required timeframes. Data flows must be mapped sufficiently to identify all systems where consumer data subject to a deletion request may reside. COMPLIANCE CONSIDERATIONS: Verify that consumer rights request workflows are operationally functional, including identity verification processes that are not overly burdensome. Confirm that opt-out of sharing signals including Global Privacy Control are honored. Assess whether the non-discrimination provision is implemented in practice, meaning consumers who exercise rights do not receive degraded service. Audit the delineation between FCRA-governed data and CCPA-governed data to ensure consumers receive accurate and complete responses to access requests.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights give California residents concrete, legally enforceable tools to manage how Equifax collects and uses their personal and financial data, including data used for marketing and profiling beyond credit reporting.
If you are a California resident, you can actively limit how Equifax uses and shares your data, request a full copy of what Equifax holds about you, and correct errors, all of which can help protect your financial profile and limit unwanted marketing. These rights are separate from and in addition to rights you have under FCRA to access and …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Equifax.