Equifax discloses that it may collect categories of information classified as sensitive under California law, including your Social Security number, financial account credentials, precise location, racial or ethnic origin, and biometric data.
This analysis describes what Equifax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are the most sensitive categories of personal data and their collection by any entity, particularly a data broker that has experienced significant data breaches historically, creates meaningful risk if data is misused or exposed.
Equifax holds some of the most sensitive categories of personal information about you, including government identifiers and financial credentials, and California residents have the right under CPRA to limit how this sensitive personal information is used, including for marketing and profiling purposes. You can exercise this right through the Equifax privacy rights portal.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
You can contact us in order to (1) update or correct your personally identifiable information, (2) change your preferences with respect to communications and other information you receive from us, or (3) delete the personally identifiable information maintained about you...
Access information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic information transferred to another party.
"Sensitive personal information: Social Security number, driver's license number, state identification card number, passport number; Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; Precise geolocation; Racial or ethnic origin, religious or philosophical beliefs, or union membership; Contents of a consumer's mail, email, and text messages unless we are the intended recipient of the communication; Genetic data; Biometric information processed for the purpose of uniquely identifying a consumer.Excerpt from Equifax's Privacy Policy
REGULATORY LANDSCAPE: CPRA establishes a distinct category of sensitive personal information (SPI) and grants California consumers the right to limit its use and disclosure to purposes reasonably necessary to provide requested services.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These are the most sensitive categories of personal data and their collection by any entity, particularly a data broker that has experienced significant data breaches historically, creates meaningful risk if data is misused or exposed.
Equifax holds some of the most sensitive categories of personal information about you, including government identifiers and financial credentials, and California residents have the right under CPRA to limit how this sensitive personal information is used, including for marketing and profiling purposes. You can exercise this right through the Equifax privacy rights portal.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Equifax.