Quarterly report pursuant to Section 13 or 15(d)

COMMITMENTS AND CONTINGENCIES

v3.24.2
COMMITMENTS AND CONTINGENCIES
6 Months Ended
Jun. 30, 2024
Commitments and Contingencies Disclosure [Abstract]  
COMMITMENTS AND CONTINGENCIES COMMITMENTS AND CONTINGENCIES
Remaining Matters Related to 2017 Cybersecurity Incident

Canadian Class Actions. Five putative Canadian class actions, four of which are on behalf of a national class of approximately 19,000 Canadian consumers, are pending against us in Ontario, British Columbia and Alberta. Each of the proposed Canadian class actions asserts a number of common law and statutory claims seeking monetary damages and other related relief in connection with a material cybersecurity incident in 2017. In addition to seeking class certification on behalf of Canadian consumers whose personal information was allegedly impacted by the 2017 cybersecurity incident, in some cases, plaintiffs also seek class certification on behalf of a larger group of Canadian consumers who had contracts for subscription products with Equifax around the time of the incident or earlier and were not impacted by the incident. The Ontario class action has been certified in part but is otherwise at a preliminary stage. All other purported class actions are at preliminary stages or stayed.

CFPB Matters

In December 2021, we received a Civil Investigative Demand (a “CID”) from the Consumer Financial Protection Bureau (“CFPB”) as part of its investigation into our consumer disputes process at our USIS business unit in order to determine whether we have followed Fair Credit Reporting Act requirements for the proper handling of consumer disputes. The CID requested the production of documents and answers to written questions. In January 2023, the CFPB informed us that its enforcement division would be investigating our previously-disclosed coding issue identified within a legacy server environment in the U.S. that impacted how some credit scores were calculated during a three-week period in 2022. The staff of the CFPB has informed us that the CFPB intends to seek injunctive and civil money penalties against us based on allegations related to the consumer disputes investigation and the coding issue investigation. We expect to engage in discussions with the CFPB and we are cooperating with the CFPB in its investigations.

Data Processing, Outsourcing Services and Other Agreements

We have separate agreements with Google, Amazon Web Services, UST Global, Kyndryl and others to outsource portions of our network and security infrastructure, computer data processing operations, applications development, business continuity and recovery services, help desk service and desktop support functions, operation of our voice and data networks, maintenance and related functions and to provide certain other administrative and operational services. The agreements expire between 2024 and 2029. Annual payment obligations in regard to these agreements vary due to factors such as the volume of data processed; changes in our servicing needs as a result of new product offerings, acquisitions or divestitures; the introduction of significant new technologies; foreign currency; or the general rate of inflation. In certain circumstances (e.g., a change in control or for our convenience), we may terminate these data processing and outsourcing agreements, and, in doing so, certain of these agreements require us to pay significant termination fees.

Guarantees and General Indemnifications

We will from time to time issue standby letters of credit, performance or surety bonds or other guarantees in the normal course of business. The aggregate notional amount of all standby letters of credit, performance bonds and surety bonds is not material at June 30, 2024 and these instruments generally have a remaining maturity of one year or less. We may issue other guarantees in the ordinary course of business. The maximum potential future payments we could be required to make under the guarantees is not material at June 30, 2024. We have agreed to guarantee the liabilities and performance obligations (some of which have limitations) of a certain debt collections and recovery management subsidiary under its commercial agreements.
Many of our commercial agreements contain commercially standard indemnification obligations related to tort, material breach or other liabilities that arise during the course of performance under the agreement. These indemnification obligations are typically mutual.

We are the lessee under many real estate leases. It is common in these commercial lease transactions for us, as the lessee, to agree to indemnify the lessor and other related third parties for tort, environmental and other liabilities that arise out of or relate to our use or occupancy of the leased premises. This type of indemnity would typically make us responsible to indemnified parties for liabilities arising out of the conduct of, among others, contractors, licensees and invitees at or in connection with the use or occupancy of the leased premises. This indemnity often extends to related liabilities arising from the negligence of the indemnified parties, but usually excludes any liabilities caused by either their sole or gross negligence and their willful misconduct.

Certain of our credit agreements include provisions which require us to make payments to preserve an expected economic return to the lenders if that economic return is diminished due to certain changes in law or regulations. In certain of these credit agreements, we also bear the risk of certain changes in tax laws that would subject payments to non-U.S. lenders to withholding taxes.

In conjunction with certain transactions, such as sales or purchases of operating assets or services in the ordinary course of business, or the disposition of certain assets or businesses, we sometimes provide routine indemnifications, the terms of which range in duration and sometimes are not limited.

The Company has entered into indemnification agreements with its directors and executive officers. Under these agreements, the Company has agreed to indemnify such individuals to the fullest extent permitted by law against liabilities that arise by reason of their status as directors or officers and to advance expenses incurred by such individuals in connection with the related legal proceedings. The Company maintains directors and officers liability insurance coverage to reduce its exposure to such obligations.

We cannot reasonably estimate our potential future payments under the guarantees and indemnities and related provisions described above because we cannot predict when and under what circumstances these provisions may be triggered.

Contingencies

In addition to the matters set forth above, we are involved in legal and regulatory matters, government investigations, claims and litigation arising in the ordinary course of business. We periodically assess our exposure related to these matters based on the information which is available. We have recorded accruals in our Consolidated Financial Statements for those matters in which it is probable that we have incurred a loss and the amount of the loss, or range of loss, can be reasonably estimated. While it is reasonably possible that we will incur losses associated for certain of these matters, it is not possible at this time to estimate the amount of loss or range of possible losses that might result from their resolution. The Company will continue to evaluate information as it becomes known and will record an estimate for losses at the time when it is both probable that a loss has been incurred and the amount of the loss is reasonably estimable.

For additional information about these and other commitments and contingencies, see Note 6 of the Notes to Consolidated Financial Statements in our 2023 Form 10-K.