CATEGORY TRAINING MODULE DESCRIPTION CADENCE AUDIENCE REGION Privacy Fair Credit Reporting Act Builds awareness of this consumer protection (FCRA) law, focusing on legal requirements for consumer Annual All associates and United States reporting agencies, including Purpose of the FCRA, new hires and Ireland** FCRA Duties, and Enforcement Action. California Consumer Training on business obligations set forth in the Privacy Act (CCPA) CCPA, such as consumer notice requirements, Annual All associates United States updating consumer-facing materials like website and Ireland privacy policies, and handling of consumer requests. Data Privacy Training Provides an overview of US national and state privacy (United States) and security laws, highlighting key aspects, such as the Gramm–Leach–Bliley Act (GLBA); the California All Associates & United States Consumer Privacy Act (2020); the Children’s Online Annual New Hires and Ireland Privacy Protection Act (COPA); and the California Financial Information Privacy Act (CFPA), in addition to presenting a deeper dive into the CCPA. Driver’s Privacy Covers DPPA regulated information, prohibitions All associates Protection Act (DPPA) on disclosures and utilization of information, DPPA Annual across various, United States enforcement, and an introduction of state drivers’ pertinent business and Ireland privacy laws. units Understanding and Provides an interactive format to identify sources Preventing UDAAP of potentially unfair, deceptive, or abusive acts or All associates practices (UDAAP), create responsibility awareness, in Marketing, Legal and offer guidance on preventing violations. Also & Compliance, focuses on Consumer Financial Protection Bureau Annual Media, Marketing United (CFPB) expectations for handling consumer Solutions States** complaints and monitoring service providers, and several recommendations for compliance policies, and additional global examples of UDAAP litigation and enforcement. departments Understanding Canadian Provides an overview and understanding of how Compliance consumer reporting regulations and laws apply to the organization and associates’ daily roles. This includes a focus on credit report content, information restrictions, maximum timeframes to report negative data, sources and types of data, consumer rights All associates and (disclosure of information, disputes, fraud alerts Annual new hires Canada** and written statements), and customer obligations. Additionally, the training focuses on internal corporate programs, policies and procedures, creating an awareness of how all associates play a key role in the implementation of a successful compliance program. International Records Ensures associates have the awareness to manage, All associates Management Awareness protect and maintain all records necessary for and new hires; business and legal reasons, as well as consumer Annual UK contract Global protection. associates*** *Associates who live or manage associates that live in: CA, CT, IL, NY **Encompasses varied locations of call center agents. ***Only new hire training for contract associates. APPENDIX TRANSUNION | 2021 SUSTAINABILITY REPORT 54