Equifax states it may collect biometric data such as fingerprints, voice recordings, and facial geometry to verify your identity when you contact the company online or by phone.
This analysis describes what Equifax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive personal information because it cannot be changed if compromised. Several states have strict laws governing how companies may collect, store, and share biometric identifiers.
Interpretive note: The policy discloses biometric collection but does not specify whether state-specific consent mechanisms such as those required under Illinois BIPA are implemented, creating uncertainty about whether disclosed practices meet statutory requirements in all applicable jurisdictions.
If Equifax collects your biometric information for identity verification, that data could be retained and, depending on how the policy is applied, shared with service providers. Illinois, Texas, and Washington impose specific consent and retention requirements for biometric data that may affect how these terms apply to residents of those states.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Biometric information: Biometric information (such as fingerprints, voice recordings, facial geometry, iris or retina scans) that can be used to identify you. We may collect biometric information to verify your identity when you interact with us online or by phone.Excerpt from Equifax's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the Washington My Health MY Data Act to the extent biometric …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Biometric data is among the most sensitive personal information because it cannot be changed if compromised. Several states have strict laws governing how companies may collect, store, and share biometric identifiers.
If Equifax collects your biometric information for identity verification, that data could be retained and, depending on how the policy is applied, shared with service providers. Illinois, Texas, and Washington impose specific consent and retention requirements for biometric data that may affect how these terms apply to residents of those states.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Equifax.