TransUnion Privacy Policy

This document is TransUnion LLC's Privacy Notice, governing the collection, use, and sharing of personal information by TransUnion and its affiliates across consumer-facing websites, mobile applications, and credit-related services, with its legal basis rooted in applicable US consumer protection and credit reporting law. The notice states that TransUnion collects a broad range of data categories including identifiers, financial information, credit history, employment data, government-issued ID numbers, geolocation data, internet activity, audio and visual information, and inferences drawn from these categories, and the terms authorize sharing this information with affiliates, business clients, service providers, and third parties for marketing and analytics purposes. Notably, the notice discloses that TransUnion operates as both a consumer reporting agency subject to the Fair Credit Reporting Act and a data broker outside that regulatory context, creating a bifurcated data governance structure where FCRA protections apply only to certain uses, while broader personal data sharing may proceed under more permissive standards for non-FCRA purposes. The notice engages the Fair Credit Reporting Act, the California Consumer Privacy Act as amended by CPRA, the Gramm-Leach-Bliley Act, and state-level privacy laws including those in Virginia, Colorado, Connecticut, Texas, Oregon, and Montana, with California residents receiving the most granular rights disclosures; compliance obligations vary materially by jurisdiction and by whether the processing falls within or outside FCRA-regulated activities.