Data privacy Responsible data stewardship is fundamental to our mission. We have developed, and continue to augment, a comprehensive, global program to protect consumer information and our data assets. Our program is built upon TransUnion’s Global Privacy Policy which requires compliance across the enterprise, including all of TransUnion’s business units, and direct and indirect majority-owned company subsidiaries. Collectively, these efforts ensure all new products and services comply with the most current privacy regulations around the world and meet or exceed consumers’ evolving privacy expectations. To ensure compliance with privacy standards and expectations, all associates are required to complete annual privacy trainings that cover applicable privacy regulations, including but not limited to the California Consumer Privacy Act and General Data Protection Regulation. Additional detail is included in the Associate Training Appendix. TransUnion regularly conducts privacy-focused assessments of our products, and processing activities for compliance with privacy regulations and alignment with consumer expectations. Our assessments consider the nature of the data use, transparency of the use and the notice made available to consumers, along with information security, individuals’ legal rights and expectations, and any relevant data quality considerations. TransUnion works extensively across industry and trade groups, as well as with regulators and customers, in an effort to ensure a high level of product compliance with privacy standards. We also incorporate the views of individuals via consumer research. TransUnion has a thorough diligence process for mergers, acquisitions and investments, and considers information security and privacy risk when evaluating every potential transaction. We review a potential acquisition’s privacy program maturity and its compliance with privacy regulations on a global basis, in addition to looking at the fairness and transparency of its data use and how those uses benefit individuals. SECURITY, GOVERNANCE & COMPLIANCE TRANSUNION | 2021 SUSTAINABILITY REPORT 26