Equifax states it shares your personal information with its affiliated companies and with business partners for marketing purposes, though it notes you have the right to opt out of sharing with business partners.
This analysis describes what Equifax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Equifax is a large corporate entity with numerous affiliates, meaning data you share with one Equifax product or service may be accessible to other Equifax entities. Sharing with external business partners for marketing expands the reach of your data beyond the credit bureau context.
Interpretive note: The policy does not fully specify which data categories are shared with each class of recipient or whether all sharing categories are covered by the opt-out mechanism described, creating uncertainty about the completeness of consumer opt-out options.
Your personal and financial data may be shared with Equifax affiliates and external business partners for marketing and product promotion, which means companies you have no direct relationship with may receive your data. You can opt out of sharing with business partners through the Equifax privacy rights portal, but affiliate sharing may continue absent further action.
How other platforms handle this
We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...
In order to provide you with services, Valve needs to share some data with the publisher or developer of the game (for example to verify your ownership of the game and register your Steam ID with the publisher), or with other third parties that Valve works with to provide services to you. Valve will...
We may share your personal information with third party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service and marketing assistance. We may also share information with advertising and analyt...
Monitoring
Equifax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with our affiliates for the purposes described in this Privacy Policy. We may also share your personal information with business partners who offer products or services that may interest you, subject to your right to opt out of such sharing.— Excerpt from Equifax's Equifax Privacy Policy
REGULATORY LANDSCAPE: GLBA governs sharing of nonpublic personal financial information with nonaffiliated third parties and requires financial institutions to provide opt-out rights for such sharing. Affiliate sharing under GLBA is subject to notice requirements but generally does not require opt-out unless the sharing is for marketing purposes and involves consumer report information, in which case FCRA's affiliate marketing opt-out provisions apply. CCPA and CPRA define sharing with third parties for cross-context behavioral advertising as a form of data sale subject to opt-out rights. The CFPB and FTC jointly oversee GLBA and FCRA compliance for entities like Equifax. GOVERNANCE EXPOSURE: Medium to High. The policy distinguishes between affiliate sharing and business partner sharing but does not fully specify which data categories are shared in each context or the purposes to which each recipient may put the data. This opacity creates risk that the opt-out mechanism described does not fully satisfy GLBA or CCPA opt-out requirements depending on the nature of the data shared. JURISDICTION FLAGS: California residents have explicit opt-out rights under CPRA for sharing with third parties for advertising purposes. GLBA opt-out requirements apply to all US consumers with nonpublic personal financial information. Heightened exposure exists where affiliate marketing uses consumer report data, triggering FCRA Section 624 affiliate marketing opt-out obligations. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with business partners should specify permissible uses, data retention limits, and downstream sharing restrictions. Where business partners receive data that originates from or is derived from consumer reports, contracts must address FCRA use restrictions including certification of permissible purpose. COMPLIANCE CONSIDERATIONS: Legal teams should audit the scope of affiliate sharing to determine whether FCRA Section 624 affiliate marketing opt-out notices have been issued where required. GLBA privacy notices should be reviewed for adequacy and timing. CCPA opt-out workflows should be tested to confirm that business partner sharing is halted upon consumer request. Data transfer agreements with business partners should be reviewed to confirm they do not enable re-sharing or secondary use inconsistent with stated purposes.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Equifax is a large corporate entity with numerous affiliates, meaning data you share with one Equifax product or service may be accessible to other Equifax entities. Sharing with external business partners for marketing expands the reach of your data beyond the credit bureau context.
Your personal and financial data may be shared with Equifax affiliates and external business partners for marketing and product promotion, which means companies you have no direct relationship with may receive your data. You can opt out of sharing with business partners through the Equifax privacy rights portal, but affiliate sharing may continue absent further action.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Equifax.