Equifax states it shares your personal information with its affiliated companies and with business partners for marketing purposes, though it notes you have the right to opt out of sharing with business partners.
This analysis describes what Equifax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Equifax is a large corporate entity with numerous affiliates, meaning data you share with one Equifax product or service may be accessible to other Equifax entities. Sharing with external business partners for marketing expands the reach of your data beyond the credit bureau context.
Interpretive note: The policy does not fully specify which data categories are shared with each class of recipient or whether all sharing categories are covered by the opt-out mechanism described, creating uncertainty about the completeness of consumer opt-out options.
Your personal and financial data may be shared with Equifax affiliates and external business partners for marketing and product promotion, which means companies you have no direct relationship with may receive your data. You can opt out of sharing with business partners through the Equifax privacy rights portal, but affiliate sharing may continue absent further action.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
Equifax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may share your personal information with our affiliates for the purposes described in this Privacy Policy. We may also share your personal information with business partners who offer products or services that may interest you, subject to your right to opt out of such sharing.— Excerpt from Equifax's Equifax Privacy Policy
REGULATORY LANDSCAPE: GLBA governs sharing of nonpublic personal financial information with nonaffiliated third parties and requires financial institutions to provide opt-out rights for such sharing. Affiliate sharing under GLBA is subject to notice requirements but generally does not require opt-out unless the sharing is for marketing purposes and involves consumer report information, in which case FCRA's affiliate marketing opt-out provisions apply. CCPA and CPRA define sharing with third parties for cross-context behavioral advertising as a form of data sale subject to opt-out rights. The CFPB and FTC jointly oversee GLBA and FCRA compliance for entities like Equifax. GOVERNANCE EXPOSURE: Medium to High. The policy distinguishes between affiliate sharing and business partner sharing but does not fully specify which data categories are shared in each context or the purposes to which each recipient may put the data. This opacity creates risk that the opt-out mechanism described does not fully satisfy GLBA or CCPA opt-out requirements depending on the nature of the data shared. JURISDICTION FLAGS: California residents have explicit opt-out rights under CPRA for sharing with third parties for advertising purposes. GLBA opt-out requirements apply to all US consumers with nonpublic personal financial information. Heightened exposure exists where affiliate marketing uses consumer report data, triggering FCRA Section 624 affiliate marketing opt-out obligations. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with business partners should specify permissible uses, data retention limits, and downstream sharing restrictions. Where business partners receive data that originates from or is derived from consumer reports, contracts must address FCRA use restrictions including certification of permissible purpose. COMPLIANCE CONSIDERATIONS: Legal teams should audit the scope of affiliate sharing to determine whether FCRA Section 624 affiliate marketing opt-out notices have been issued where required. GLBA privacy notices should be reviewed for adequacy and timing. CCPA opt-out workflows should be tested to confirm that business partner sharing is halted upon consumer request. Data transfer agreements with business partners should be reviewed to confirm they do not enable re-sharing or secondary use inconsistent with stated purposes.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Equifax is a large corporate entity with numerous affiliates, meaning data you share with one Equifax product or service may be accessible to other Equifax entities. Sharing with external business partners for marketing expands the reach of your data beyond the credit bureau context.
Your personal and financial data may be shared with Equifax affiliates and external business partners for marketing and product promotion, which means companies you have no direct relationship with may receive your data. You can opt out of sharing with business partners through the Equifax privacy rights portal, but affiliate sharing may continue absent further action.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Equifax.