Depending on your state of residence, you have the right to know what data TransUnion holds about you, request corrections or deletion, opt out of data sharing for advertising, and not be penalized for exercising these rights.
This analysis describes what TransUnion's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights give consumers in California and several other states meaningful tools to understand and control how their personal data is used, though the actual scope of each right varies by state and may be limited by FCRA carve-outs for credit data.
If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon, or Montana, you can request access to your full personal data profile at TransUnion, ask for corrections, and opt out of data sharing for advertising, but your ability to delete credit file data remains limited by federal law.
How other platforms handle this
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the rig...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
Monitoring
TransUnion has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected it, the business or commercial purpose for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we have collected about you. The right to request that we delete personal information we collected from you, subject to certain exceptions. The right to correct inaccurate personal information that we maintain about you. The right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. The right not to receive discriminatory treatment for exercising your privacy rights.— Excerpt from TransUnion's TransUnion Privacy Policy
REGULATORY LANDSCAPE: The consumer rights disclosed in this section are required under the CCPA and CPRA for California residents, with parallel rights under Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Oregon Consumer Privacy Act, and Montana Consumer Data Privacy Act. Each statute has different timelines, exemptions, and verification requirements. The non-discrimination right is required under CCPA and CPRA and prohibits differential service or pricing based on exercise of privacy rights, though financial incentive programs with appropriate disclosures are permitted. GOVERNANCE EXPOSURE: Medium. TransUnion's obligations to respond to access, deletion, and correction requests within applicable statutory timelines create operational compliance obligations. The right to correct inaccurate personal information under CPRA overlaps with but is distinct from the FCRA right to dispute inaccurate credit report information, and managing both concurrently creates process complexity. JURISDICTION FLAGS: California's CPRA rights are the most comprehensive and are enforced by the California Privacy Protection Agency with civil penalties. Texas, Oregon, and Montana are newer comprehensive privacy law states where enforcement posture is still developing. Residents of states without comprehensive privacy laws have no equivalent statutory rights under this framework, though they retain FCRA dispute rights. CONTRACT AND VENDOR IMPLICATIONS: Organizations that provide consumer personal data to TransUnion or receive it from TransUnion should assess whether they have obligations to facilitate consumer rights requests that may flow through TransUnion's privacy portal. Service provider agreements should address how rights requests are routed and honored across the data supply chain. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that response timelines for each applicable state law are built into their request management workflows. The notice's rights disclosures should be reviewed periodically as new state privacy laws take effect. Identity verification procedures for rights requests should balance consumer accessibility against fraud risk, and overly burdensome verification should be avoided.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights give consumers in California and several other states meaningful tools to understand and control how their personal data is used, though the actual scope of each right varies by state and may be limited by FCRA carve-outs for credit data.
If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon, or Montana, you can request access to your full personal data profile at TransUnion, ask for corrections, and opt out of data sharing for advertising, but your ability to delete credit file data remains limited by federal law.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TransUnion.