TransUnion · TransUnion Privacy Policy · View original document ↗

Sale and Sharing Opt-Out Rights

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for TransUnion Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

You can tell TransUnion to stop selling or sharing your personal data for targeted advertising purposes by clicking a link on their website or by using a browser tool that sends a privacy signal automatically.

This analysis describes what TransUnion's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This opt-out right, required by California law and voluntarily extended to some other state residents, gives you practical control over whether your behavioral data is used to target you with advertising across the web.

Consumer impact (what this means for users)

Using the opt-out link or enabling Global Privacy Control in your browser can stop TransUnion from sharing your personal data for cross-context behavioral advertising, which may reduce the extent to which your browsing and behavioral profile is distributed to advertising platforms.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Scroll to the bottom of the TransUnion website and click 'Do Not Sell or Share My Personal Information.' Complete the request form. TransUnion states it will process requests within 15 business days.

How other platforms handle this

Verizon Medium

California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...

Grammarly Medium

If you are a California resident, you have certain rights with respect to your personal information, including: The right to know about the personal information we collect, use, disclose, and sell. The right to delete your personal information. The right to opt out of the sale or sharing of your per...

Twilio Medium

If you are a California resident, you have the right to opt out of the sale or sharing of your personal information. You also have the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal informat...

See all platforms with this clause type →

Monitoring

TransUnion has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. To opt out, click the 'Do Not Sell or Share My Personal Information' link at the bottom of our website or contact us using the information in the 'Contact Us' section of this Notice. We will process your request within 15 business days. We also recognize the Global Privacy Control (GPC) signal. If you use a browser or browser extension that sends a GPC opt-out preference signal, we will process your request to opt out of the sale or sharing of your personal information.

— Excerpt from TransUnion's TransUnion Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: The opt-out right for sale and sharing of personal information is required under the CCPA and CPRA for California residents. The obligation to recognize Global Privacy Control signals is established under CPRA regulations enforced by the California Privacy Protection Agency. Similar but not identical opt-out rights exist under Virginia CDPA, Colorado CPA, and other state privacy laws cited in the notice. The FTC may also have interest in whether opt-out mechanisms function as described. GOVERNANCE EXPOSURE: Medium. TransUnion's commitment to recognize GPC signals is a meaningful disclosure, but technical implementation of GPC recognition across all data collection touchpoints is operationally complex and subject to audit. If the GPC signal is not reliably processed or if opted-out consumers continue to have their data shared, enforcement exposure under CPRA and FTC unfair practices authority increases. JURISDICTION FLAGS: California residents have the most robust statutory right to opt out of sale and sharing. Residents of Colorado, Connecticut, Virginia, Texas, Oregon, and Montana have opt-out rights for targeted advertising under their respective state laws, though the mechanisms and timelines may differ. Organizations subject to GDPR should note that opt-out from sale under CCPA is not equivalent to withdrawal of consent or objection to processing under GDPR, which requires separate analysis. CONTRACT AND VENDOR IMPLICATIONS: Third parties receiving TransUnion data for advertising or marketing purposes should maintain records showing that they are not processing data of consumers who have exercised opt-out rights. Downstream use of opted-out consumer data by a business client of TransUnion could create joint liability. COMPLIANCE CONSIDERATIONS: Compliance teams should test the opt-out mechanism for functionality and confirm that the GPC signal is being recognized across all website domains and data collection points. Records of opt-out elections should be maintained and propagated to downstream sharing partners within the 15-business-day processing window stated in the notice. Consumer-facing language should accurately describe the scope of what is and is not covered by the opt-out.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    State attorneys general in California, Colorado, Virginia, Connecticut, Texas, Oregon, and Montana have enforcement authority over opt-out rights under their respective state privacy laws.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
TransUnion Privacy Policy
Entity
TransUnion
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-009410
Document ID
CA-D-00593
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
70807c662f0b1c52c6343a59056ff3ccc90198c94cf07f3874e8fe7d6f563a7f
Analysis generated
May 8, 2026 07:44 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: TransUnion
Document: TransUnion Privacy Policy
Record ID: CA-P-009410
Captured: 2026-05-08 07:44:52 UTC
SHA-256: 70807c662f0b1c52…
URL: https://conductatlas.com/platform/transunion/transunion-privacy-policy/sale-and-sharing-opt-out-rights/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does TransUnion's Sale and Sharing Opt-Out Rights clause do?

This opt-out right, required by California law and voluntarily extended to some other state residents, gives you practical control over whether your behavioral data is used to target you with advertising across the web.

How does this clause affect you?

Using the opt-out link or enabling Global Privacy Control in your browser can stop TransUnion from sharing your personal data for cross-context behavioral advertising, which may reduce the extent to which your browsing and behavioral profile is distributed to advertising platforms.

Is ConductAtlas affiliated with TransUnion?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TransUnion.