COMMITMENTS AND CONTINGENCIES
|12 Months Ended
Dec. 31, 2022
|Commitments and Contingencies Disclosure [Abstract]
|COMMITMENTS AND CONTINGENCIES
|COMMITMENTS AND CONTINGENCIES
Canadian Class Actions
In 2017, we experienced a cybersecurity incident following a criminal attack on our systems that involved the theft of personal information of consumers. Five putative Canadian class actions, four of which are on behalf of a national class of approximately 19,000 Canadian consumers, are pending against us in Ontario, British Columbia and Alberta. Each of the proposed Canadian class actions asserts a number of common law and statutory claims seeking monetary damages and other related relief in connection with the 2017 cybersecurity incident. In addition to seeking class certification on behalf of Canadian
consumers whose personal information was allegedly impacted by the 2017 cybersecurity incident, in some cases, plaintiffs also seek class certification on behalf of a larger group of Canadian consumers who had contracts for subscription products with Equifax around the time of the incident or earlier and were not impacted by the incident.
On December 13, 2019, the court in Ontario granted certification of a nationwide class that includes all impacted Canadians as well as Canadians who had subscription products with Equifax between March 7, 2017 and July 30, 2017 who were not impacted by the incident. We appealed one of the claims on which a class was certified and on June 9, 2021, our appeal was granted by the Ontario Divisional Court. The plaintiff filed a notice of further appeal with the Ontario Court of Appeal, and on November 25, 2022, the Ontario Court of Appeal dismissed the plaintiff’s appeal and upheld the Divisional Court’s ruling in our favor. On January 24, 2023, the plaintiff appealed this decision to the Supreme Court of Canada. All remaining purported class actions are at preliminary stages or stayed.
The U.K.’s Financial Conduct Authority (“FCA”) opened an enforcement investigation against our U.K. subsidiary, Equifax Limited, in October 2017 in connection with the 2017 cybersecurity incident. The investigation by the FCA has involved a number of information requirements and interviews. We have responded to the information requirements and continue to cooperate with the investigation. At this time, we are unable to predict the outcome of this FCA investigation, including whether the investigation will result in any action or proceeding against us.
Data Processing, Outsourcing Services and Other Agreements
We have separate agreements with Google, Amazon Web Services, UST Global, Kyndryl and others to outsource portions of our network and security infrastructure, computer data processing operations, applications development, business continuity and recovery services, help desk service and desktop support functions, operation of our voice and data networks, maintenance and related functions and to provide certain other administrative and operational services. The agreements expire between 2023 and 2028. The estimated aggregate minimum contractual obligation remaining under these agreements is approximately $948 million as of December 31, 2022, with no future year’s minimum contractual obligation expected to exceed approximately $361 million. Annual payment obligations in regard to these agreements vary due to factors such as the volume of data processed; changes in our servicing needs as a result of new product offerings, acquisitions or divestitures; the introduction of significant new technologies; foreign currency; or the general rate of inflation. In certain circumstances (e.g., a change in control or for our convenience), we may terminate these data processing and outsourcing agreements, and, in doing so, certain of these agreements require us to pay significant termination fees.
Under our agreement with Google, we have outsourced certain areas of our network and security infrastructure. The estimated future minimum contractual obligation under the agreement is approximately $440 million for the remaining term, with no individual year’s minimum expected to exceed approximately $120 million. We may terminate certain portions of this agreement without penalty in the event that Google is in material breach of the terms of the agreement. During 2022, 2021 and 2020, we paid approximately $152 million, $62 million and $29 million, respectively, for these services.
Under our agreement with Amazon Web Services, we have outsourced certain areas of our network and security infrastructure. The estimated future minimum contractual obligation under the agreement is approximately $222 million for the remaining term, with no individual year's minimum expected to exceed approximately $52 million. During 2022, 2021, and 2020, we paid approximately $74 million, $58 million and $43 million, respectively, for these services.
Change in Control Agreements
In February 2019, we adopted the Equifax Inc. Change in Control Severance Plan (the “CIC Plan”) for certain key executives. The CIC Plan does not apply to Mark W. Begor, our Chief Executive Officer, whose severance benefits in a change of control are contained in his employment agreement with the Company. The CIC Plan and Mr. Begor’s agreement provide for, among other things, certain payments and benefits in the event of a qualifying termination of employment (i.e., termination of employment by the executive for “good reason” or termination of employment by the Company without “cause,” each as defined in the applicable document) following a change in control of the Company. In the event of a qualifying termination, the executive will become entitled to continuation of certain employee benefits for years, as well as a lump sum severance payment, all of which differs by executive.
Change in control events potentially triggering benefits under the CIC Plan and Mr. Begor’s agreement would occur, subject to certain exceptions, if (1) any person acquires 20% or more of our voting stock; (2) upon a merger or other business combination, our shareholders receive less than two-thirds of the common stock and combined voting power of the new
company; (3) members of the current Board of Directors ceasing to constitute a majority of the Board of Directors, except for new directors that are regularly elected; (4) we sell or otherwise dispose of all or substantially all of our assets; or (5) we liquidate or dissolve. If these change in control benefits had been triggered as of December 31, 2022, payments of approximately $30.5 million would have been made.
Under the Company’s existing employee stock benefit plans, upon a change in control, outstanding awards will continue to vest in accordance with the terms. However, if outstanding awards are not assumed or continued in the change in control transaction or if the executive incurs a qualifying termination in connection with the change in control, then all outstanding stock options and nonvested stock awards will vest. With respect to unvested performance based share awards dependent upon the Company’s three-year relative total shareholder return, if at least one calendar year of performance during the performance period has been completed prior to the change in control event, the awards will be paid out based on the Company’s performance at that time; otherwise the payout of shares will be at 100% of the target award. Under the Company’s existing director stock benefit plans, upon a change in control, all outstanding nonvested stock awards will vest.
We will from time to time issue standby letters of credit, performance or surety bonds or other guarantees in the normal course of business. The aggregate notional amount of all performance bonds, surety bonds and standby letters of credit is not material at December 31, 2022 and generally have a remaining maturity of one year or less. We may issue other guarantees in the ordinary course of business. The maximum potential future payments we could be required to make under the guarantees is not material at December 31, 2022. We have agreed to guarantee the liabilities and performance obligations (some of which have limitations) of a certain debt collections and recovery management subsidiary under its commercial agreements. We cannot reasonably estimate our potential future payments under the guarantees and related provisions described above because we cannot predict when and under what circumstances these provisions may be triggered. We had no accruals related to guarantees on our Consolidated Balance Sheets at December 31, 2022.
Many of our commercial agreements contain commercially standard indemnification obligations related to tort, material breach or other liabilities that arise during the course of performance under the agreement. These indemnification obligations are typically mutual.
We are the lessee under many real estate leases. It is common in these commercial lease transactions for us, as the lessee, to agree to indemnify the lessor and other related third parties for tort, environmental and other liabilities that arise out of or relate to our use or occupancy of the leased premises. This type of indemnity would typically make us responsible to indemnified parties for liabilities arising out of the conduct of, among others, contractors, licensees and invitees at or in connection with the use or occupancy of the leased premises. This indemnity often extends to related liabilities arising from the negligence of the indemnified parties, but usually excludes any liabilities caused by either their sole or gross negligence and their willful misconduct.
Certain of our credit agreements include provisions which require us to make payments to preserve an expected economic return to the lenders if that economic return is diminished due to certain changes in law or regulations. In certain of these credit agreements, we also bear the risk of certain changes in tax laws that would be subject to payments to non-U.S. lenders to withholding taxes.
In conjunction with certain transactions, such as sales or purchases of operating assets or services in the ordinary course of business, or the disposition of certain assets or businesses, we sometimes provide routine indemnifications, the terms of which range in duration and sometimes are not limited.
The Company has entered into indemnification agreements with its directors and executive officers. Under these agreements, the Company has agreed to indemnify such individuals to the fullest extent permitted by law against liabilities that arise by reason of their status as directors or officers and to advance expenses incurred by such individuals in connection with the related legal proceedings. The Company maintains directors and officers liability insurance coverage to reduce its exposure to such obligations.
We cannot reasonably estimate our potential future payments under the indemnities and related provisions described above because we cannot predict when and under what circumstances these provisions may be triggered. We have no accrual related to indemnifications on our Consolidated Balance Sheets at December 31, 2022 and 2021.
Subsidiary Dividend and Fund Transfer Limitations
The ability of some of our subsidiaries and associated companies to transfer funds to us is limited, in some cases, by certain restrictions imposed by foreign governments, which do not, individually or in the aggregate, materially limit our ability to service our indebtedness, meet our current obligations or pay dividends.
In addition to the matters set forth above, we are involved in legal and regulatory matters, government investigations, claims and litigation arising in the ordinary course of business. We periodically assess our exposure related to these matters based on the information which is available. We have recorded accruals in our Consolidated Financial Statements for those matters in which it is probable that we have incurred a loss and the amount of the loss, or range of loss, can be reasonably estimated.
Although the final outcome of these matters cannot be predicted with certainty, any possible adverse outcome arising from these matters is not expected to have a material impact on our Consolidated Financial Statements, either individually or in the aggregate. However, our evaluation of the likely impact of these matters may change in the future. We accrue for unpaid legal fees for services performed to date.