TransUnion
40 named things its latest annual report says its results depend on, each in the company's own words. 25 of them are also named by other companies we've read.
Customers
United States financial services industry
concentrated in · approximately 37%named as a riskOur 2025 revenue in our U.S. Markets Financial Services and Consumer Interactive verticals accounted for approximately 37% and 13%, respectively, of consolidated gross revenues, respectively.Risk factors (Item 1A)
Also named by CTSH
Suppliers
Credit score algorithm providers
depends onnamed as a riskFor example, we license credit-scoring algorithms and the right to sell credit scores derived from those algorithms from third parties for a fee.Business (Item 1)
Telecommunications providers
depends onnamed as a riskIn addition, we generate a significant amount of our revenues through channels that are dependent on links to telecommunications providers.Risk factors (Item 1A)
External data sources (financial institutions and public records repositories)
depends onnamed as a riskOur services and products depend extensively upon continued access to and receipt of data from external sources, including data received from customers, strategic partners and various government and public records repositories.Risk factors (Item 1A)
Other companies
Trans Union de Mexico
approximately 26%We currently own approximately 26% of Trans Union de Mexico, and have agreed to acquire an additional 68% from selling shareholders,Business (Item 1)
TransUnion CIBIL Limited
operates inAt times, our strategic investments have resulted in us acquiring controlling financial interests that we consolidate, including our initial investment in TransUnion CIBIL Limited (“CIBIL”), which is the core of our India region operations, our 2025 acquisition of Monevo and our previously announced pending acquisition of a majority ownership interest in Trans Union de Mexico.Business (Item 1)
Competitors
Experian
competes withIn our International segment, we generally compete with Equifax and Experian directly or indirectly through their subsidiaries or investments.Business (Item 1)
Equifax
competes withIn our U.S. Markets segment, our competition generally includes Equifax, Experian and LexisNexis, in addition to certain competitors with whom we only compete in specific industry verticals.Business (Item 1)
Also named by FICO
FICO
competes withFor example, we compete with FICO in the Financial Services vertical, with Verisk Analytics, Inc. in the Insurance vertical, and with LiveRamp and Experian in the marketing solutions space.Business (Item 1)
LifeLock
competes withWe also compete with LifeLock as well as personal finance websites in the Consumer Interactive vertical, some of whom offer free credit information.Business (Item 1)
Places
United Kingdom
operates in · $414 millionnamed as a riskFor example, during 2023, inflationary pressures and rising interest rates in the U.K. resulted in a goodwill impairment of $414 million in our United Kingdom reporting unit.Risk factors (Item 1A)
Also named by AGX, AJG, AMP, BAC, BF/B, BGC, BRO, C and 59 more
International operations
earns from · approximately 22% of our reported revenuenamed as a riskWe conduct operations in over 30 countries and, in the fiscal year ended December 31, 2025, approximately 22% of our reported revenue was derived by our international operations based on where it was earned, which subjects us to various risks inherent in global operations.Risk factors (Item 1A)
Also named by APG, AXP, CARR, COP, COST, DD, ECL, EQIX and 14 more
India
operates in · approximately 42% of our global workforceOur GCCs represent approximately 42% of our global workforce supporting a wide range of functions.Business (Item 1)
Also named by A, AAPL, ACN, AJG, AKAM, AMZN, AOS, AVGO and 54 more
United States
concentrated innamed as a riskIn addition, a significant amount of our revenue is concentrated among certain customers, industries, product offerings and in distinct geographic regions, primarily in the United States.Risk factors (Item 1A)
Also named by ABBV, ADP, AJG, AMGN, APA, AXGN, AXP, BALL and 139 more
Hazards
July 2025 cyberattack
4.4 million consumersnamed as a riskFor example, in July 2025, TransUnion was affected by a cyberattack in which a third party gained unauthorized access through social engineering to a third-party application used in our customer support operations thatRisk factors (Item 1A)
Commodities and inputs
SOFR
exposed to its price · approximately $5.4 millionnamed as a riskDuring 2025, a 10% change in the average Term SOFR rates utilized in the calculation of our actual interest expense, would have increased our interest expense by approximately $5.4 million for the year.Market risk (Item 7A)
Also named by AAP, AIOT, APG, APH, ARES, AXON, BGC, BR and 82 more
U.S. dollar exchange rates (foreign currency basket)
exposed to its price · $101.1 millionnamed as a riskA 10% change in the value of the U.S. dollar relative to a basket of the currencies for all foreign countries in which we had operations during 2025 would have changed our revenue by $101.1 million and our Adjusted EBITDA by $44.0 million.Market risk (Item 7A)
Mexican peso
exposed to its pricenamed as a riskIn addition, in November 2025 we entered into a foreign currency forward contract to economically hedge our exposure of a portion of the purchase price for our pending acquisition of a majority interest in Trans Union de Mexico, which is denominated in Mexican pesos.Market risk (Item 7A)
Also named by AYI, AZO, BAX, CCK, CDRE, CP, DCH, EZPW and 14 more
Regulators
Consumer Financial Protection Bureau (CFPB)
subject to · civil money penalties of up to $1.0 million per daynamed as a riskIn these proceedings, the CFPB can seek relief that includes: rescission or reformation of contracts, restitution, disgorgement of profits, payment of damages, limits on activities and civil money penalties of up to $1.0 million per day for knowing violations.Risk factors (Item 1A)
Also named by ABNB, AFRM, ALLY, AN, AUB, AXP, BAC, CASH and 61 more
Federal Trade Commission (FTC)
subject tonamed as a riskRegulatory enforcement of the FCRA is under the purview of the Federal Trade Commission (the “FTC”), the Consumer Financial Protection Bureau (the “CFPB”) and state attorneys general, acting alone or in concert with one another.Business (Item 1)
Also named by AMZN, AN, AVGO, BJ, CART, CELH, CHD, CHE and 56 more
Office of the Comptroller of the Currency (OCC)
subject tonamed as a riskIn light of this guidance, our existing or potential financial services customers subject to regulation may continue to revise their third-party risk management policies and processes and the terms on which they do business with us, which may adversely affect our relationship with such customers.Risk factors (Item 1A)
Also named by ADP, AMP, AXP, BAC, BLK, C, CASH, CFG and 22 more
Federal Housing Finance Agency
subject tonamed as a riskFor instance, the Federal Housing Finance Agency and various government sponsored entities continue to evaluate permitting mortgage originators to underwrite loans using less than three credit reports, rather than the current mandate to use a credit report from each of the three national consumer reporting agencies.Risk factors (Item 1A)
Also named by ABR, AGNC, DHI, DX, ELS, FICO, NLY, RITM and 1 more
CFPB NORA dispute handling enforcement matter
subject tonamed as a riskOn July 12, 2024, the CFPB Enforcement Division advised us that it had obtained authority to pursue an enforcement action against us seeking specific injunctive relief provisions and civil money penalties.Risk factors (Item 1A)
Laws and programs
CFPB and FTC 2023 Consent Order (Tenant and Employment Screening)
subject to · $11.0 million in redress and $4.0 million in civil money penaltiesnamed as a riskPursuant to the Consent Order, we paid $11.0 million in redress and $4.0 million in civil money penalties and implemented certain business process changes.Risk factors (Item 1A)
Trans Union LLC senior secured credit facility
approximately $5.1 billionnamed as a riskAs of December 31, 2025, the book value of our debt was approximately $5.1 billion primarily consisting of outstanding borrowings under Trans Union LLC’s senior secured credit facility.Risk factors (Item 1A)
California Consumer Privacy Act
subject tonamed as a riskFor example, the California Privacy Protection Agency finalized regulations under the California Consumer Privacy Act, which will become effective over the course of 2026 through 2027, regarding the use of automated decision-making.Risk factors (Item 1A)
Also named by AAP, AIOT, AKAM, ALL, APP, AYI, BAC, BBSI and 69 more
General Data Protection Regulation (GDPR)
subject tonamed as a riskFailure to comply with any provision of GDPR could result in significant regulatory or other enforcement penalties.Business (Item 1)
Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more
EU AI Act
subject tonamed as a riskThe majority of the substantive requirements will apply beginning in August 2026.Risk factors (Item 1A)
Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more
HIPAA
subject tonamed as a riskWe obtain protected health information under a “business associate” agreement that is subject to the privacy, security and transactional requirements imposed by HIPAA and HITECH.Business (Item 1)
Also named by AFL, BAX, BBSI, CI, DHR, DOC, DOCN, DOCU and 19 more
Dodd-Frank Act
subject tonamed as a riskThe Dodd-Frank Act prohibits unfair, deceptive or abusive acts or practices (“UDAAP”) with respect to consumer financial products or services and provides the CFPB with authority to enforce those provisions.Business (Item 1)
Also named by AFL, AN, BGC, CNX, CPAY, EPD, EQT, FITB and 14 more
Gramm-Leach-Bliley Act (GLBA)
subject tonamed as a riskSeveral of our data assets are subject to GLBA provisions, including limitations on the use or disclosure of the underlying data and rules relating to the technological, physical and administrative safeguarding of non-public personal information.Business (Item 1)
Also named by BR, CINF, EFX, FICO, FIS, FITB, OMF, ORI and 4 more
Fair Credit Reporting Act (FCRA)
subject tonamed as a riskViolation of the FCRA can result in civil and criminal penalties.Business (Item 1)
Colorado Artificial Intelligence Act
subject tonamed as a riskThe Colorado Artificial Intelligence Act, which will take effect on June 30, 2026, will establish a comprehensive governance framework for high-risk AI systems, imposing requirements related to transparency, algorithmic discrimination, AI risk assessments, and adverse decisions.Business (Item 1)
Credit Repair Organizations Act (CROA)
subject tonamed as a riskCROA allows for a private right of action and permits consumers to recover all money paid for alleged “credit repair” services in the event of violation.Business (Item 1)
Also named by FICO
Drivers' Privacy Protection Act (DPPA)
subject tonamed as a riskThe DPPA imposes criminal fines for non-compliance and grants individuals a private right of action, including actual and punitive damages and attorneys’ fees.Business (Item 1)
National Credit Act (South Africa)
subject toThe NCA is enforced by The National Credit Regulator who has authority to supervise and examine credit bureaus.Business (Item 1)
India Digital Personal Data Protection Act
subject toThe DPDPA Rules require “Data Fiduciaries”, such as CIBIL, to provide notices of data processing, define purpose-based retention timelines, implement reasonable security safeguards, provide breach notification within 72 hours and obtain verifiable parental consent prior to processing child data.Business (Item 1)
Technology
OneTru
depends onnamed as a riskIn 2026, we intend to complete the U.S credit business migration and start delivering OneTru capabilities in International markets.Business (Item 1)