Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy references California resident rights under the CCPA and CPRA, including the right to know what personal information is collected, the right to request deletion, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information.
This analysis describes what TransUnion's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
CCPA and CPRA rights apply to non-FCRA commercial data TransUnion processes, providing California residents with opt-out and deletion rights that are operationally distinct from FCRA dispute rights and must be processed through separate consumer request workflows.
Interpretive note: The specific opt-out mechanism URL and request process details were not available in the provided document excerpt; CCPA applicability is inferred from TransUnion's business scope and the policy navigation references.
California residents may submit requests to know, delete, correct, or opt out of sale or sharing of personal information processed under non-FCRA commercial data frameworks, with TransUnion required to respond within statutory timelines under CCPA.
Cross-platform context
See how other platforms handle California CCPA Opt-Out Rights and similar clauses.
Compare across platforms →Monitoring
TransUnion has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
(1) REGULATORY LANDSCAPE: The CCPA as amended by CPRA is enforced by the California Privacy Protection Agency and the California Attorney General. It applies to personal information not otherwise exempted by FCRA (which has a partial CCPA carve-out for consumer report data). TransUnion's non-FCRA commercial data operations including TruAudience and related analytics products are subject to CCPA opt-out of sale and sharing requirements. (2) GOVERNANCE EXPOSURE: High. The intersection of FCRA-exempted data and CCPA-covered commercial data within a single entity creates classification challenges. Misclassifying CCPA-covered data as FCRA-exempt could result in failure to honor opt-out requests, creating regulatory exposure with the California Privacy Protection Agency. (3) JURISDICTION FLAGS: CCPA applies specifically to California residents. Other states including Virginia, Colorado, Connecticut, Texas, and others have enacted comparable privacy statutes with varying rights and timelines. EU/EEA residents have parallel but distinct rights under GDPR including the right to object to processing under Article 21. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers using TransUnion commercial data products should assess whether their data processing agreements address CCPA consumer request pass-through obligations, particularly if they receive personal information about California residents from TransUnion. (5) COMPLIANCE CONSIDERATIONS: TransUnion's opt-out infrastructure for California residents should be audited to confirm it covers non-FCRA commercial data products and that opt-out signals from Global Privacy Control or similar mechanisms are processed as required. Compliance teams should verify that the FCRA and CCPA exemption classifications are accurately applied in consumer rights response workflows.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
CCPA and CPRA rights apply to non-FCRA commercial data TransUnion processes, providing California residents with opt-out and deletion rights that are operationally distinct from FCRA dispute rights and must be processed through separate consumer request workflows.
California residents may submit requests to know, delete, correct, or opt out of sale or sharing of personal information processed under non-FCRA commercial data frameworks, with TransUnion required to respond within statutory timelines under CCPA.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TransUnion.