TransUnion is a publicly traded (NYSE: TRU) credit bureau and identity-data provider that collects information on more than 200 million Americans, including information on their payment histories, debt loads, maximum credit limits, names and addresses of current creditors, and other elements of their credit relationships. The company's privacy notices disclose sharing and sale of personal and deidentified data for targeted advertising and marketing purposes across a large family of subsidiaries (including Neustar, iovation, Sontiq, and TruAudience), and its regulatory record includes multiple FTC/CFPB settlements and two major data breach disclosures (South Africa, 2022; United States, 2025) — details below are drawn from TransUnion's own privacy notices, FTC/CFPB press releases and consent orders, SEC filings, and breach notifications to state attorneys general.
TRACK RECORD
2 ENFORCEMENT ACTIONS
[2023-10-12]
In October 2023, the FTC and CFPB obtained a $23 million combined settlement with TransUnion and its subsidiary TransUnion Rental Screening Solutions over tenant-screening accuracy failures and mishandled security freeze/lock requests.
In 2017, the FTC and CFPB ordered TransUnion (jointly with Equifax) to pay roughly $23 million for allegedly falsely advertising that credit scores sold to consumers were the same scores lenders use.
Receipted federal filings: FEC campaign-finance records and LDA lobbying disclosures. A tie is a disclosed transaction or filing, not a claim of influence or wrongdoing.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Commerce, Science, and Transportation, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Environment and Public Works, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Banking, Housing, and Urban Affairs, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Appropriations, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Energy and Natural Resources, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Agriculture, Nutrition, and Forestry, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on the Judiciary, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on Commerce, Science, and Transportation, per LDA Form LD-2.
TRANSUNION LLC reported lobbying activity before the Senate on DEF-coded issues, where the official serves on the Senate Committee on the Judiciary, per LDA Form LD-2.
TransUnion's primary U.S. privacy notice discloses that retention duration is tied to account activity and business need rather than a fixed universal period.
TransUnion, as one of the three major U.S. credit reporting agencies, collects extensive financial and identity data covering more than 200 million Americans.
TransUnion's consumer privacy rights page explicitly identifies certain subsidiaries as commonly owned "TransUnion companies," directing consumers to separate rights-exercise pages for each.
TransUnion's own "About Us" corporate history page discloses a chain of acquisitions (Neustar, Sontiq, iovation, CallCredit, CIBIL) that expanded its identity and marketing data holdings, making the parent-subsidiary relationships traceable to a public timeline.
TransUnion (NYSE: TRU) publicly disclosed its $3.1 billion acquisition of Neustar, a digital-identity and marketing-data company, via press release and SEC 8-K filing.
TransUnion's TruAudience Marketing Solutions privacy notice discloses that personal information may be shared for targeted advertising and that sensitive personal data may be sold under applicable law.
In July 2025, TransUnion disclosed a breach of a third-party application used by its U.S. consumer support operations, compromising Social Security numbers and personal information of more than 4.4 million Americans.
In 2017, the FTC and CFPB ordered TransUnion (jointly with Equifax) to pay roughly $23 million for allegedly falsely advertising that credit scores sold to consumers were the same scores lenders use.
In October 2023, the FTC and CFPB obtained a $23 million combined settlement with TransUnion and its subsidiary TransUnion Rental Screening Solutions over tenant-screening accuracy failures and mishandled security freeze/lock requests.
In March 2022, TransUnion South Africa disclosed that a criminal third party accessed a server using misused client credentials, ultimately affecting roughly 5 million consumers and 600,000 businesses, with an extortion demand of about $15 million that TransUnion did not pay.
TransUnion maintains a separate "Cookies and Similar Technologies Notice" referenced from its consumer-facing privacy notices, indicating tracking technologies are documented outside the main privacy notice text.
TransUnion's privacy notices disclose use of Google Analytics 360, Google Tag Manager, and Google Ads for analytics and advertising purposes, with an opt-out link to Google's partner policy.