Consumer Law Library

TransUnion; Trans Union, LLC; TransUnion Interactive, Inc.; and John T. Danaher

Agency
Consumer Financial Protection Bureau
Date
Type
enforcement action
Source
consumerfinance.gov/enforcement/actions/transunion-et-al/
Pages
218
PDFs
3 documents (links below)

Documents in this case

Case summary

On April 12, 2022, the Bureau filed a lawsuit against TransUnion, parent company of one of the three nationwide consumer reporting agencies, and two of its subsidiaries, Trans Union LLC and TransUnion Interactive, Inc. (collectively, the TransUnion Companies), which are headquartered in Chicago, Illinois, as well as former executive John Danaher. The Bureau’s complaint, which was amended on May 24, 2023, alleged that the TransUnion Companies and Danaher violated the Consumer Financial Protection Act of 2010; and that the TransUnion Companies violated Regulation V, the Electronic Fund Transfer Act, and Regulation E.

On February 28, 2025, pursuant to a stipulated dismissal, the matter was voluntarily dismissed against all defendants with prejudice. The dismissal was docketed on March 21, 2025.

Complaint ()

PDF of this document (106 pages)

Page 2

IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF ILLINOIS EASTERN DIVISION

Consumer Financial Protection Bureau,

Plaintiff,

v.

TransUnion, TransUnion, LLC, TransUnion Interactive, Inc., and John T. Danaher,

Defendants.

Case No.

COMPLAINT The Consumer Financial Protection Bureau (Bureau) brings this action against TransUnion, TransUnion, LLC, and TransUnion Interactive, Inc., (collectively, Corporate Defendants), and John T. Danaher (Danaher) under the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5531, 5536(a), 5564, 5565, the Electronic Fund Transfer Act (EFTA), 15 U.S.C. § 1693e(a), and its implementing regulation, Regulation E, 12 C.F.R. § 1005.10(b), and the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681j(a), and its implementing regulation, Regulation V, 12 C.F.R. § 1022.136.

INTRODUCTION 1.

In 2017, the Bureau found that Corporate Defendants had engaged in deceptive acts and practices in violation of the CFPA in connection with their marketing and sale of credit scores, credit reports, and credit-monitoring products to consumers. The Bureau agreed to resolve those findings without litigation through a consent order (the Order, which is Appendix A to this Complaint) that required Corporate Defendants to pay restitution and a civil penalty, and to abide by certain conduct provisions. Corporate Defendants’ stipulation to the entry of the Order is Appendix B to this Complaint.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 1 of 54 PageID #:1

Page 3

2.

Corporate Defendants have violated the Order since the day it went into effect. Corporate Defendants failed to implement the Order’s core requirements, including (i) ensuring that consumers were not misled about the nature and terms of their credit-monitoring product; (ii) adding a checkbox to their trial offer subscription products to ensure consumers consented to enrolling in such products; and (iii) providing a way for consumers to immediately and easily cancel their subscriptions and obtain refunds instead of facing roadblocks. 3.

Not only did Corporate Defendants violate the Order and continue engaging in the same deceptive acts that necessitated it, but they also engaged in numerous other misleading tactics to cause consumers to enroll in their subscription products and prevent them from cancelling.

4.

Further, Corporate Defendants engaged in additional violations of Federal consumer financial laws; they failed to properly obtain consumers’ authorization to make recurring withdrawals from their bank accounts—violating EFTA and Regulation E—and included misleading advertisements on annualcreditreport.com that diverted consumers seeking their free annual credit report to an indefinite paid subscription for credit monitoring. 5.

John T. Danaher, the long-time and now former President of TUI, also violated the Order. Danaher had the authority and obligation to ensure Corporate Defendants complied with the Order, but failed to do so. Instead, he allowed Corporate Defendants to defy the law and continue engaging in misleading marketing, even in the face of thousands of consumer complaints and refund requests.

6.

The Bureau files this Complaint to stop the Defendants’ unlawful practices that have harmed consumers.

JURISDICTION AND VENUE 7.

This Court has subject-matter jurisdiction over this action because it is brought under “Federal consumer financial law,” 12 U.S.C. § 5565(a)(1), presents a federal question, 28 U.S.C. § 1331, and is brought by an agency of the United States, 28 U.S.C. § 1345. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 2 of 54 PageID #:2

Page 4

8.

Venue is proper because Defendants are located, reside, or do business in this district. 12 U.S.C. § 5564(f).

PARTIES 9.

The Bureau is an independent agency of the United States created by the CFPA. 12 U.S.C. § 5491(a). The Bureau has independent litigating authority and may initiate civil actions in federal district court to secure appropriate relief for violations of “Federal consumer financial law,” 12 U.S.C. § 5564(a)-(b), including the CFPA, EFTA, Regulation E, FCRA, and Regulation V, 12 C.F.R. part 1022. 12 U.S.C. §§ 5481(12)(C), (F), (14); 15 U.S.C. § 1693o. 10.

TransUnion Interactive, Inc. (TUI) is a Delaware corporation located in Chicago, Illinois that generates, markets, and sells Credit-Related Products. Credit-Related Products are defined by the Order as “any product or service [Corporate Defendants] offer for sale directly to consumers, including but not limited to the [TU Credit Monitoring] Product, credit scores, credit reports, credit monitoring, or identity theft insurance or protection.” 11.

At all times relevant to this Complaint, directly and indirectly, including through marketing affiliates, through a common enterprise with the other Corporate Defendants, and as an agent acting with actual or apparent authority for the other Corporate Defendants, TUI has offered or provided a “consumer financial product or service” and is therefore a “covered person” under the CFPA. 12 U.S.C. §§ 5481(5), (6), (15)(A)(ix). TUI is a wholly-owned subsidiary of TransUnion LLC (TULLC).

12.

TULLC is a Delaware limited liability company located in Chicago, Illinois. At all times relevant to this Complaint, TULLC has been a “nationwide consumer reporting agency” (NCRA). 15 U.S.C. § 1681a(p); 12 C.F.R. § 1022.130(h). TULLC compiles and maintains financial, consumer, and commercial data from across the nation and worldwide. TULLC uses credit information it has collected in consumer credit files to generate consumer reports, including credit reports, and makes such information available to TUI for its use in marketing Credit- Related Products to consumers. TULLC markets, sells, and provides consumer reports to Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 3 of 54 PageID #:3

Page 5

commercial users, such as lenders, insurance companies, and potential employers. At all times relevant to this Complaint, directly, indirectly through its agent and affiliate, TUI, and through a common enterprise with the other Corporate Defendants, and acting as an agent with actual or apparent authority for the other Corporate Defendants, TULLC has offered or provided a “consumer financial product or service.” 12 U.S.C. §§ 5481(5), (15)(A)(ix). TULLC has also provided various services to TUI, including compliance and legal services. TULLC is therefore a “covered person” under the CFPA. 12 U.S.C. § 5481(6).

13.

TransUnion is a publicly traded company that is incorporated in Delaware and located in Chicago, Illinois. TransUnion is the ultimate parent company of TUI and TULLC. For 2021, TransUnion publicly reported annual revenue of nearly $3 billion, approximately 18% of which came from TUI. At all times relevant to this Complaint, TransUnion has provided enterprise services to TULLC and TUI, including overall governance and financial support, and therefore is a “covered person” under 12 U.S.C. § 5481(6)(B). TransUnion has also been the “controlling shareholder” of TUI and TULLC at all times relevant to this Complaint. Thus, TransUnion is also a “related person” and, therefore, is deemed a “covered person” on this basis as well. 12 U.S.C. §§ 5481(25)(B), (C)(i).

14.

John T. Danaher was the President of TUI from 2004 until April 1, 2021. From April 2, 2021 until February 1, 2022, he was Executive Vice President for TUI. From 2004 until at least February 1, 2022, Danaher materially participated in the conduct of TUI’s affairs and, consequently, he was a “related person,” and therefore a covered person, under the CFPA. 12 U.S.C. § 5481(25)(B), (C)(i)-(ii).

15.

At all times relevant to this Complaint, TransUnion, TULLC and TUI have operated as a common enterprise (the TU Common Enterprise). They have conducted business through interconnected companies that operate under common control, share offices, and share advertising and marketing. TransUnion and TULLC have maintained officers and directors in common. In public SEC filings, TransUnion holds itself out to the public as an NCRA – even Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 4 of 54 PageID #:4

Page 6

though it is not itself an NCRA –by touting its fifty-year operating history as a leading provider of credit reports that has acquired and developed proprietary databases used to generate consumer reports and other “solutions” for its customers, including consumers. TransUnion’s Board of Directors (the TransUnion Board) governs and oversees the entire enterprise, including TULLC and TUI. Among other things, through its Audit and Compliance Committee, the TransUnion Board oversees the Legal and Compliance Departments for the TransUnion enterprise, including TUI and TULLC. Directly and through its agents and affiliates, TUI and TULLC, and through a common enterprise with those other Corporate Defendants, TransUnion has offered or provided a “consumer financial product or service” at all times relevant to this Complaint. 12 U.S.C. §§ 5481(5), (6), (15)(A)(ix).

FACTUAL BACKGROUND Corporate Defendants’ Sale of Credit-Related Products to Consumers 16.

Corporate Defendants, through TUI, market and sell Credit-Related Products to consumers. These products include the TransUnion Credit Monitoring Product (TU Credit Monitoring), which is a bundled Credit-Related Product offered by TUI that is sold as a paid monthly subscription. It includes access to a credit score, credit report, credit monitoring, and a product called “Credit Lock” which enables the consumer to lock and unlock his or her TransUnion and Equifax credit reports.

17.

Through Corporate Defendants’ direct-to-consumer, or “direct,” marketing channel, Corporate Defendants provide consumers directly with credit scores, credit monitoring, credit reports, and other Credit-Related Products.

18.

Corporate Defendants have marketed and sold Credit-Related Products to consumers through a variety of online channels. This includes banner and display advertisements that appear on Corporate Defendants’ main website (transunion.com) and on popular websites such as auto.com, bankrate.com, and Amazon; direct emails to certain consumers; search Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 5 of 54 PageID #:5

Page 7

engines; social media; and advertisements on websites operated by Corporate Defendants’ marketing affiliates, including ConsumerTrack, Inc. (ConsumerTrack). 19.

Corporate Defendants have also marketed Credit-Related Products through annualcreditreport.com, which is the website through which consumers can obtain their free annual credit report from Corporate Defendants and the other NCRAs. 20.

At all times relevant to this Complaint, certain marketing affiliates (Affiliates), such as ConsumerTrack, offered Credit-Related Products directly to consumers on Corporate Defendants’ behalf and at Corporate Defendants’ direction, and are regarded by Corporate Defendants as part of their direct marketing channel. Corporate Defendants review and approve all marketing materials and disclosures, including enrollment forms and processes, used by Affiliates.

21.

After consumers click on Corporate Defendants’ advertisements and/or landing pages for Credit-Related Products, they are taken to an enrollment form. An example of Corporate Defendants’ TU Credit Monitoring enrollment form and identity verification questions on transunion.com (Homepage Enrollment Form) is attached as Appendix C. Corporate Defendants used that version of the Homepage Enrollment Form from June 2019 through May 2020 and have used substantially similar versions of the form at all other times relevant to this Complaint. Examples of Corporate Defendants’ TU Credit Monitoring enrollment forms used by Affiliates (Affiliate Enrollment Forms) are attached as Appendix D. ConsumerTrack, on behalf of Corporate Defendants, used Affiliate Enrollment Form D.1 on or about November 21, 2020 and Affiliate Form D.2 on or about March 30, 2021 and, upon information and belief, has used substantially similar versions of the form from March 2017 through the date of this Complaint. 22.

After a consumer completes an enrollment form for TU Credit Monitoring, Corporate Defendants, acting directly or indirectly, or through an agent, enroll the consumer into the product, grant the consumer access to the TU Credit Monitoring online dashboard on transunion.com, charge the consumer’s credit or debit card ($1 for trial offers or the full face value Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 6 of 54 PageID #:6

Page 8

for full price offers), and send an email to the consumer that confirms the consumer’s enrollment into TU Credit Monitoring. Consumers remain enrolled in TU Credit Monitoring and are charged by Corporate Defendants for each month of enrollment (the price varies depending on the offer and channel but is typically $9.99 to $24.99 each month) until consumers affirmatively cancel the subscription, either by calling Corporate Defendants’ customer service line or by using Corporate Defendants’ online cancellation portal on transunion.com.

The Order 23.

On January 3, 2017, the Bureau issued the Order under the caption In re TransUnion Interactive, Inc., et al., No. 2017-CFPB-0002 (Jan. 3, 2017) (Appendix A), as extended on December 22, 2021 and April 1, 2022. The Order was, by its terms, effective on the date of its issuance, January 3, 2017 (the Effective Date). In the Order, the Bureau found that Corporate Defendants violated the CFPA between July 21, 2011 through January 3, 2017 by deceptively marketing Credit-Related Products in two ways. First, Corporate Defendants falsely represented that the credit scores they marketed and sold to consumers were the same scores lenders typically use to determine creditworthiness, when, in reality, the scores used to determine creditworthiness by lenders and other commercial users were highly unlikely to be the scores sold to consumers by Corporate Defendants. Second, Corporate Defendants falsely represented that the scores and reports were “free” or “$1,” when, in reality, a consumer who signed up for a “free” or “$1” trial was automatically enrolled in a subscription program with a recurring monthly fee. 24.

The Order required Corporate Defendants to pay $13.93 million in restitution to consumers and a $3 million civil penalty.

25.

The Order also imposed conduct provisions, including certain provisions specifically designed to protect consumers from continued wrongful conduct by Corporate Defendants. Order, ¶ 40.

26.

The conduct provisions in Paragraph 40 of the Order apply to Corporate Defendants, as well as “their officers, agents, servants, employees, and attorneys who have actual Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 7 of 54 PageID #:7

Page 9

notice of this Consent Order, whether acting directly or indirectly….” The provisions prohibit them from making certain misrepresentations in connection with the marketing and sale of Credit-Related Products; require them to obtain the express informed consent of consumers before enrolling them into Credit-Related Products with a negative option feature; require them to simplify the cancellation process for Credit-Related Products and enable consumers to immediately cancel the purchase of those products; require them to provide certain disclosures to consumers in connection with selling credit scores; and require them to collect, review, and assess consumer-related information and data and to modify their advertising accordingly. The distribution and acknowledgment provisions in Paragraph 65–67 of the Order require Corporate Defendants to distribute the Order to certain persons and obtain acknowledgments of receipt. The recordkeeping provisions in Paragraph 68 of the Order require Corporate Defendants to maintain certain records.

27.

The entire Order is binding on all three Corporate Defendants. The Order also provides that the TransUnion Board “will have the ultimate responsibility for proper and sound management of [Corporate Defendants] and for ensuring that [Corporate Defendants] comply with Federal consumer financial law and this Consent Order.” Order, ¶ 45. 28.

Through the signatures of TransUnion’s then-director, president and chief executive officer and its then-executive vice president and general counsel, Corporate Defendants stipulated to the entry of the Order on December 22, 2016. (Appendix B). Among other things, Corporate Defendants “admit[ted] the facts necessary to establish the Bureau’s jurisdiction over [Corporate Defendants] and the subject matter of this action.” Corporate Defendants further agreed in the stipulation that: (a) “the Consent Order will be deemed an ‘order issued with the consent of the person concerned’ under 12 U.S.C. § 5563(b)(4)”; (b) “the Order will become a final order, effective upon issuance, and will be fully enforceable by the Bureau under 12 U.S.C. §§ 5563(d)(1) and 5565”; and (c) “the facts described in Section IV of the Consent Order [the Bureau’s Findings and Conclusions] will be taken as true and be given collateral estoppel effect, without Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 8 of 54 PageID #:8

Page 10

further proof, in any proceeding before the Bureau to enforce the Consent Order, or in any subsequent civil litigation by the Bureau to enforce the Consent Order or its rights to any payment or monetary judgment under the Consent Order.”

29.

In October 2018, the Bureau commenced an examination of Corporate Defendants (the 2018 Examination) and requested information from Corporate Defendants about their compliance with the Order. In May 2019, Bureau examiners informed Corporate Defendants that they were violating several requirements of the Order. 30.

In June 2020, following an investigation, the Bureau’s Office of Enforcement informed Corporate Defendants that they continued to violate the Order requirements identified during the 2018 Examination and were also violating additional Order requirements and Federal consumer financial laws.

31.

In June 2021, the Bureau’s Office of Enforcement informed Corporate Defendants that they remained in non-compliance with the Order requirements identified in May 2019 and June 2020 and that Corporate Defendants were also violating several additional Order requirements and Federal consumer financial laws. The Bureau’s Office of Enforcement also informed Danaher that he was violating the Order.

Corporate Defendants Violated the Order, EFTA and Regulation E, and Engaged in Deceptive Practices, in Connection with the Marketing and Sale of Credit-Related Products Corporate Defendants’ misrepresentations regarding the nature of TU Credit Monitoring 32.

Paragraph 40(a)(iii) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, in connection with the advertising or marketing of a Credit-Related Product, any material fact about “any . . . conditions of the product or service, or any material aspect of its performance . . . nature, or central characteristics.” 33.

The conditions, nature, and central characteristics of the TU Credit Monitoring product are that it is an ongoing monthly subscription for credit-monitoring services that includes Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 9 of 54 PageID #:9

Page 11

access to a credit score, credit report, and a “Credit Lock” option that blocks new application inquiries on a consumer’s credit file. After a consumer is enrolled into TU Credit Monitoring, Corporate Defendants charge each consumer a recurring membership fee automatically and indefinitely each month until the consumer cancels.

34.

Though TU Credit Monitoring gives consumers access to a credit score, it is not a one-time transaction for a score or a report, and a consumer’s access to a score is conditioned on enrollment in a subscription.

35.

Although TU Credit Monitoring does not offer consumers access to a standalone credit score or report without a subscription, after the Order’s Effective Date and through the present, Corporate Defendants have advertised TU Credit Monitoring on Corporate Defendants’ website and in other locations using prominent and brightly-colored buttons that Corporate Defendants refer to as “Call to Action” buttons. The buttons say, for example, “GET YOUR SCORE,” “TAKE ME TO MY CREDIT SCORE,” and “YES, SHOW ME MY CREDIT NOW.” Any mention of credit monitoring in these advertisements is generally less prominent than the “credit” or “credit score” language.

36.

Figure 1, below, is an example of a “Call to Action” button that Corporate Defendants placed on transunion.com:

Figure 1 37.

On Corporate Defendants’ website, between the Effective Date and the present, there has frequently been a “Call to Action” button similar to the one in Figure 1 on the upper right corner of the homepage, without any accompanying reference to credit monitoring, a price, or a subscription.

38.

These advertisements and others that focus on “scores” or “credit” are likely to mislead consumers acting reasonably under the circumstances because they give consumers the Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 10 of 54 PageID #:10

Page 12

impression that clicking on the advertisement will allow consumers to “get” or “see” a standalone credit score.

39.

But in reality, when a consumer clicks on the “GET YOUR CREDIT SCORE” button and other similar “Call to Action” buttons used by Corporate Defendants, the consumer is not given the opportunity to receive a standalone credit score. Rather, the consumer is taken to an enrollment process for TU Credit Monitoring.

40.

As discussed below, in Paragraphs 78–91, the Homepage Enrollment Form that Corporate Defendants use in connection with these advertisements is also misleading, giving consumers the impression that they are not purchasing anything, but instead providing credit card information for identity verification purposes.

41.

Corporate Defendants use advertisements that refer prominently to “credit scores” instead of “credit monitoring” to increase consumer enrollments. 42.

Corporate Defendants’ misrepresentations about the conditions, nature, and central characteristics of TU Credit Monitoring are material to consumers. Since the Effective Date, Corporate Defendants have received many complaints and refund demands from consumers who intended to obtain only their credit scores or reports, including consumers who had come to the website for the purpose of completing tasks such as disputing something on their credit reports or managing security freezes on their credit reports, and did not understand how they came to be enrolled in an indefinite paid monthly subscription. 43.

In addition, and as described in further detail in Paragraphs 124–137 below, Corporate Defendants used similar “score” representations to advertise the TU Credit Monitoring product on web pages related to consumers’ free annual file disclosure. Corporate Defendants have received many complaints and refund demands from consumers who thought they were accessing their “score” as part of their free annual file disclosure and were confused about how they came to be enrolled in the paid TU Credit Monitoring subscription product. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 11 of 54 PageID #:11

Page 13

44.

Corporate Defendants have therefore violated Paragraph 40(a)(iii) of the Order by misrepresenting the conditions of TU Credit Monitoring and material aspects of its conditions, nature, and central characteristics. This conduct was also deceptive. Corporate Defendants’ misrepresentations about consumers’ enrollment status 45.

As set forth in Paragraph 32, above, Paragraph 40(a)(iii) of the Order prohibits Corporate Defendants and their officers, whether acting directly or indirectly, from making express or implied misrepresentations regarding the conditions of a Credit-Related Product. 46.

In addition, Paragraph 40(a)(i) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, “[a]ny material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges[.]”

47.

Corporate Defendants engage in email marketing campaigns, sending emails to specified groups of consumers to market Credit-Related Products. 48.

The marketing emails generally include images and text, including prominent “Call to Action” buttons of the type used by Corporate Defendants in other advertising channels. 49.

Since the Order’s Effective Date, including beginning on or about December 1, 2019 and February 20, 2020, Corporate Defendants have sent marketing emails to consumers who were not already enrolled in TU Credit Monitoring suggesting those consumers already have access to TU Credit Monitoring or are otherwise eligible to obtain a credit score or report directly from Corporate Defendants without incurring an additional cost. 50.

For example, Corporate Defendants sent over 500,000 emails with the subject line, “You’re in!” The body of the email, as shown in Figure 2, said, in prominent type, “Thank you for signing up!” and contained a prominent orange “Call to Action” button that said, “YES, Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 12 of 54 PageID #:12

Page 14

SHOW ME MY CREDIT NOW.”

Figure 2 Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 13 of 54 PageID #:13

Page 15

51.

The email gives reasonable consumers the misleading impression that they are already signed up for, and entitled to the benefits of, the product offered without cost or obligation.

52.

In reality, the consumers who have received this email have, at most, only “signed up” to receive marketing emails from Corporate Defendants and have not in fact enrolled in TU Credit Monitoring. They are not eligible to obtain a credit score or report directly from Corporate Defendants without incurring an additional cost. But when a consumer clicks on the “YES, SHOW ME MY CREDIT NOW” button, the consumer is taken to the Homepage Enrollment Form. 53.

The email’s only mention of a subscription price is buried in fine print below the images on the email and is insufficient to overcome the misleading net impression caused by the prominent language and orange button in the email.

54.

This misimpression is material to consumers because consumers who believed they were already enrolled in TU Credit Monitoring or eligible to obtain a credit score or report without incurring additional cost would be more likely to click the “YES, SHOW ME MY CREDIT NOW” button, travel to the Homepage Enrollment Form—which itself is misleading, as described in Paragraphs 78–91—and enroll in the TU Credit Monitoring product. 55.

By misrepresenting through these and similar emails that TU Credit Monitoring was “without cost or obligation” and by misrepresenting the material conditions of TU Credit Monitoring—specifically, its price—Corporate Defendants violated Paragraphs 40(a)(i) and (iii) of the Order and committed deceptive acts and practices. Corporate Defendants’ misrepresentations about the nature of the credit score provided 56.

Credit scores are, among other things, numerical summaries designed to predict consumer payment behavior on a wide range of credit products. Many lenders and other Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 14 of 54 PageID #:14

Page 16

commercial users rely, in part, on consumers’ credit scores when deciding whether to extend credit to a consumer.

57.

No single credit score or credit score model serves as the primary credit score for the marketplace. Lenders use a variety of credit scores, which vary by score provider, scoring model, and target industry.

58.

Credit reporting companies like Corporate Defendants, and other companies, apply various analytical scoring models to the information in consumer credit files to produce the credit scores that lenders and commercial users rely upon. 59.

Corporate Defendants generate a credit score based on a scoring model from VantageScore Solutions, LLC, which has offered several versions of its score since 2011. Corporate Defendants refer to this score as the VantageScore. 60.

In addition to selling credit scores to lenders and other commercial users, Corporate Defendants market and sell the VantageScore credit scores to consumers as a part of the TU Credit Monitoring bundle.

61.

In the Order, the Bureau found that the VantageScore credit scores were “not the same scores typically used by lenders or other commercial users for credit decisions.” Consent Order ¶ 30.

62.

Paragraph 40(c) of the Order requires Corporate Defendants, their officers, agents, servants, employees, and attorneys who have actual notice of the Order, whether acting directly or indirectly, to take the following actions, among others, when offering or providing a VantageScore credit score to consumers:

a. “[c]learly and prominently disclose the nature of the credit score offered in each communication containing the offer and, for internet offers, on at least one page of the order process” (Order ¶ 40(c)(i)); b. “[e]nsure that the disclosure clearly and prominently discloses or substantially states” that “the credit score [Corporate Defendants are] Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 15 of 54 PageID #:15

Page 17

selling is not likely to be the same score used by lenders or other commercial users for credit decisions” (Order ¶ 40(c)(ii)); and c. “[f]or written communications, including for internet offers, ensure that the disclosure contains a label in font size double that of the disclosure that says: ‘What You Need to Know’” (Order ¶ 40(c)(iii)). 63.

Corporate Defendants failed to implement these requirements in their direct marketing channel, including, on information and belief, in marketing materials used by Affiliates on Corporate Defendants’ behalf.

64.

Specifically, from the Effective Date to the present, Corporate Defendants failed to place disclosures on most display or banner advertisements covered by ¶ 40(c)(i), despite the fact that such advertisements constituted “communication[s] containing the offer.” 65.

Corporate Defendants also failed to include the required “What You Need to Know” label on any disclosures from the Effective Date until at least April 2019. 66.

Corporate Defendants have also, from the Effective Date through the present, failed to “clearly and prominently disclose or substantially state” that “the credit score [Corporate Defendants are] selling is not likely to be the same score used by lenders or other commercial users for credit decisions,” as required by ¶ 40(c)(ii) of the Order. 67.

Instead, at all times since January 2017, the relevant part of Corporate Defendants’ VantageScore disclosure for all advertisements and enrollments has stated that “[t]he credit score you receive is based on the VantageScore 3.0 and may not be the credit score model used by your lender” (emphasis added). This is substantially the same as the language Corporate Defendants used prior to the Effective Date of the Order, which stated “[t]he score you get from us may not be the one your lender uses.”

68.

Corporate Defendants’ use of “may not,” instead of the Order’s language “is not likely to be,” suggests a reasonable probability that the consumer’s lender would use the VantageScore 3.0 when making a lending decision regarding the consumer. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 16 of 54 PageID #:16

Page 18

69.

In addition to the score disclosure language, Corporate Defendants have also, in other ways, continued to misrepresent to consumers that the VantageScore they are purchasing is the same score used by lenders or other commercial users to determine creditworthiness. For example, certain of Corporate Defendants’ advertisements and landing pages offering “credit scores” after the Effective Date have represented to the consumer: “If your score is 580 or better, you can apply for a government-backed loan with the Federal Housing Administration;” “47% of employers do a credit check before hiring someone;” and “Drivers with excellent credit pay 50% less for car insurance.” Corporate Defendants’ website also features a mortgage calculator that prompts the consumer to enter her credit score, and if the consumer clicks on a link saying she is “not sure” of her credit score, she is taken to the TU Credit Monitoring enrollment process. 70.

In addition, Corporate Defendants send emails to consumers on behalf of certain lenders, marketing “personal loans” to those consumers. In those emails, Corporate Defendants embed advertisements for TU Credit Monitoring that say, for example: “P.S. you may want to see your credit score before applying for a personal loan.” If a consumer clicks on the embedded link, the consumer is taken to the TU Credit Monitoring enrollment process. 71.

In fact, there is no way for Corporate Defendants or a consumer to know which credit score model or particular credit score a lender may rely upon when making a credit decision related to that consumer. Indeed, when responding to consumer complaints about credit scores, Corporate Defendants have admitted that “there are hundreds of scoring models utilized today from financial institutions throughout the United States. Each scoring model is chosen by the financial institution based on criteria they specify in relation to their business needs.” 72.

For certain consumers, there are significant and meaningful differences between the VantageScore credit scores marketed and sold to consumers and the variety of credit scores used by lenders.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 17 of 54 PageID #:17

Page 19

73.

As a result, for these consumers, the scores Corporate Defendants marketed and sold to them presented an inaccurate picture of how lenders, the vast majority of which use other scores and data providers, assess their creditworthiness.

74.

Corporate Defendants’ failure to include the required disclosures on each internet advertising page, their failure until April 2019 to include the “What You Need to Know” label on any disclosures, and their failure to change their disclosure about VantageScore’s prevalence from an assertion that it “may not” be used by a consumer’s lender to the fact that it is “not likely to” be used by a consumer’s lender, renders their conduct as essentially unchanged from prior to the Order.

75.

Thus, it remains the case that Corporate Defendants “have represented, directly or indirectly, expressly or impliedly, that the credit scores they market and sell to consumers are the same scores typically used by lenders or other commercial users for credit decisions,” as the Bureau found in the Order. Order ¶ 29. Such representations are likely to affect consumers’ conduct or decisions regarding whether to provide payment information and have misled or have been likely to mislead consumers acting reasonably under the circumstances. 76.

These score representations are unsubstantiated and, therefore, deceptive because, as discussed above, Corporate Defendants lack a reasonable basis to assert that there is a reasonable probability that a lender would specifically use the VantageScore when making a lending decision about a consumer, instead of any of the hundreds of commercial and proprietary scoring models available.

77.

By failing to make the required disclosures, Corporate Defendants have violated Paragraph 40(c) of the Order and have continued to engage in deceptive acts and practices.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 18 of 54 PageID #:18

Page 20

Corporate Defendants’ misrepresentations regarding the purpose for which payment information would be used 78.

Paragraph 40(a)(ii) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order from misrepresenting, directly or indirectly, expressly or impliedly, “[a]ny material fact about the timing or manner of any charge or bill, . . . the purpose for which a consumer’s credit card or payment information will be used, . . . the date(s) upon which the consumer will be charged or billed, and the deadline (by date or frequency) by which the consumer must act in order to stop any charges[.]” 79.

After the Order’s Effective Date, Corporate Defendants violated Paragraph 40(a)(ii) by giving consumers the misleading impression that their payment information was requested for purposes other than payment and that they would not be immediately charged. Corporate Defendants made these misrepresentations in connection with the Homepage Enrollment Form.

80.

At least since the Order’s Effective Date through the present, when a consumer clicks on a TU Credit Monitoring advertisement or landing page that Corporate Defendants did not place through an Affiliate, she is taken to the Homepage Enrollment Form. The form asks the consumer to “Tell Us About Yourself” and provide personal information. 81.

After the consumer provides personal information, the form then asks the consumer to create a login to Corporate Defendants’ website and to provide payment information. Although Corporate Defendants use that payment information to charge consumers, there is no indication that consumers will immediately be charged. 82.

Instead, in close proximity to the request for payment information, Corporate Defendants represent that the consumer has authorized TUI to use “personal information you provide during the enrollment process . . . to confirm your identity, display your credit data to you and provide you with personalized offers.”

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 19 of 54 PageID #:19

Page 21

83.

Consumers are also asked to answer questions about their financial history, such as the balance of their mortgage, in order to verify their identities and pull their credit files. Some consumers are given the option of verifying their identity with an authorization code. 84.

The last step many consumers take before their cards are charged is to click on a Call to Action that says, “VERIFY MY IDENTITY” or other language indicating that the consumer assents to having Corporate Defendants confirm his or her identity. For other consumers, the last button they click says “GET MY CREDIT SCORE.” But even after clicking those final buttons, nothing on the screen tells consumers they have been charged; they simply gain access to the TU Credit Monitoring consumer portal.

85.

Corporate Defendants have used substantially the same Homepage Enrollment Form for all enrollments into TU Credit Monitoring through transunion.com during any given time period, except that consumers who clicked on advertisements on annualcreditreport.com are asked to verify their identity at an earlier point than other consumers. 86.

The only indication in the enrollment process that consumers are making some sort of purchase is through a fine print, low contrast disclosure, located off to the side of the enrollment form. The disclosure is inside an image that can take up to 30 seconds longer to load than the rest of the material in the form.

87.

For consumers residing in California only, Corporate Defendants provide an additional disclosure. But it appears in fine print, makes reference solely to a monthly charge, and fails to warn consumers that they will be charged immediately. 88.

These fine print disclosures about monthly charges are not sufficiently clear or prominent to overcome the impression left by the rest of the enrollment form that the payment information was for a purpose other than payment.

89.

The net impression created by the types of misrepresentations in the Homepage Enrollment Form has misled, or has been likely to mislead, consumers acting reasonably under the circumstances. Since the Order’s Effective Date, Corporate Defendants have received Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 20 of 54 PageID #:20

Page 22

thousands of complaints and refund requests from consumers who did not understand how they came to be enrolled in a paid monthly subscription product, including many consumers who specifically stated that they had provided their payment information believing that Corporate Defendants were requesting it to verify their identities, not to charge them. 90.

The Homepage Enrollment Form was likely to affect consumers’ conduct or decisions regarding whether to provide payment information. 91.

Corporate Defendants’ misrepresentations in connection with the Homepage Enrollment Form, made from at least the Effective Date through the present, violated Paragraph 40(a)(ii) of the Order. This conduct was also deceptive. Corporate Defendants offered Negative Option enrollments to consumers without obtaining express informed consent 92.

Paragraph 40(b)(i) of the Order requires Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, to “obtain the express informed consent from the consumer” before enrolling any consumer into a Credit-Related Product with a Negative Option feature. “Negative Option” is defined by Paragraph 3(j) of the Order as a “category of commercial transactions in which a seller markets an offer for a trial period and the seller then interprets a customer’s failure to take an affirmative action, either to reject an offer or cancel an agreement, as assent or continuing assent to be charged for goods or services.”

93.

Specifically, Paragraph 40(b)(i)(1) provides that, for internet offers, “express informed consent” in connection with a Negative Option feature requires “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature (i.e., it cannot be pre-checked), and which clearly and conspicuously states that the consumer agrees to be billed for the product unless the consumer cancels before the trial period expires[.]” 94.

Paragraph 40(b)(i)(2) requires that “[i]mmediately adjacent to the affirmative selection checkbox,” Corporate Defendants “must clearly and conspicuously disclose: (i) if Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 21 of 54 PageID #:21

Page 23

applicable, the amount the consumer will be charged on a recurring (e.g., monthly) basis if the product or service is not cancelled before the expiration of the trial period; and (ii) the date when the trial period expires and the amount the consumer will be billed[.]” 95.

After the Order’s Effective Date, Corporate Defendants, acting directly and indirectly, continued to enroll consumers into Credit-Related Products with Negative Option features without obeying the specific requirements set forth in Paragraphs 40(b)(i)(1) and (2). Specifically, for most Negative Option enrollments that Corporate Defendants have completed since the Effective Date, which represent millions of consumer enrollments, Corporate Defendants have failed to use an affirmative selection checkbox as required by Paragraph 40(b)(i). 96.

These Negative Option enrollments that violated the Order occurred in two ways: (a) via the enrollment processes hosted on Corporate Defendants’ own website after consumers were directed there from advertisements on annualcreditreport.com and elsewhere, including on popular websites and in email marketing campaigns; and (b) via enrollment processes hosted by Affiliates on behalf of and at the direction of Corporate Defendants. 97.

For example, between January 2017 and January 2019, for certain consumers who had viewed and clicked on advertisements on annualcreditreport.com, Corporate Defendants enrolled those consumers into TU Credit Monitoring subscriptions with Negative Option features. Like the Homepage Enrollment Form, none of the enrollment forms consumers completed contained “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants nonetheless enrolled those consumers into TU Credit Monitoring subscriptions with Negative Option features after the consumers completed enrollment forms. 98.

Following the Effective Date until sometime in 2020, Corporate Defendants failed to decommission certain trial offers for Credit-Related Products that had been made to consumers prior to the Effective Date. Like the Homepage Enrollment Form, none of the enrollment forms consumers completed contained “a check box on the final order page that consumers must Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 22 of 54 PageID #:22

Page 24

affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants nonetheless enrolled those consumers into Credit-Related Products with Negative Option features after the consumers completed enrollment forms. 99.

From March 2017 to the present, millions of consumers clicked on advertisements for Credit-Related Products that were placed on Corporate Defendants’ behalf by ConsumerTrack and other Affiliates. The enrollment forms that these consumers completed did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants, acting directly or indirectly, or through an agent, nonetheless enrolled those consumers into Credit-Related Products with Negative Option features after the consumers completed enrollment forms. 100.

For example, on or about November 21, 2020, ConsumerTrack placed the advertisement in Figure 3 on a third-party website.

Figure 3 101.

Consumers who clicked on this advertisement were ultimately taken to Affiliate Enrollment Form D.1. The enrollment form did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 23 of 54 PageID #:23

Page 25

regarding billing at all. Nonetheless, after a consumer completed and submitted the enrollment form, Corporate Defendants, acting directly or indirectly, or through an agent (1) enrolled the consumer into the TU Credit Monitoring product; (2) charged the consumer $1; and (3) and sent the consumer an email with login instructions for the TU Credit Monitoring portal on transunion.com. After the expiration of the trial period, Corporate Defendants charged the consumers automatically and indefinitely for each month of the subscription until the consumers contacted Corporate Defendants to cancel the subscription. 102.

In another example, on or about March 30, 2021, ConsumerTrack placed the advertisement in Figure 4 on a third-party website.

Figure 4 103.

Consumers who clicked on this advertisement were taken to Affiliate Enrollment Form D.2. The enrollment form did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Nonetheless, after the consumer completed and submitted the enrollment form, Corporate Defendants, acting directly or indirectly, or through an agent (1) enrolled the consumer into the TU Credit Monitoring product; (2) charged the consumer $1; and (3) and sent the consumer an email with login instructions for the TU Credit Monitoring portal on transunion.com. After the expiration of a trial period, Corporate Defendants charged the Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 24 of 54 PageID #:24

Page 26

consumers automatically and indefinitely for each month of the subscription until the consumers contacted Corporate Defendants to cancel the subscription. 104.

This conduct violated Paragraph 40(b)(i) of the Order.

Corporate Defendants continued to misrepresent that TU Credit Monitoring was “free” or $1 in connection with Negative Option enrollments 105.

As set forth above, paragraph 40(a)(i) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, “[a]ny material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges[.]”

106.

After the Order’s Effective Date, Corporate Defendants continued using advertisements for subscription Credit-Related Products that misrepresented to consumers that they would have access to “free” or $1 credit scores and credit reports, as reflected in Figures 3 and 4. These misrepresentations primarily occurred through advertisements placed by Affiliates on behalf of, at the direction of, Corporate Defendants.

107.

In fact, these advertisements were associated with a Negative Option billing structure, and consumers who completed an Affiliate Enrollment Form were enrolled by Corporate Defendants into a trial offer for TU Credit Monitoring. After the trial period, consumers who did not cancel their subscriptions were immediately enrolled in an indefinite paid monthly subscription for TU Credit Monitoring.

108.

Corporate Defendants failed to adequately disclose the Negative Option feature. The disclosures, if any, in the advertisements or in the Affiliate Enrollment Forms were neither clear nor conspicuous. And, as set forth in Paragraphs 92–107, Corporate Defendants failed to Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 25 of 54 PageID #:25

Page 27

obtain consumers’ express informed consent to enrollment in the Negative Option feature. This rendered Corporate Defendants’ conduct essentially unchanged from prior to the Effective Date. 109.

Corporate Defendants’ misrepresentations in connection with Affiliate advertisements and enrollments into TU Credit Monitoring subscriptions with Negative Option features violated Paragraph 40(a)(i) of the Order. This conduct was also deceptive. Corporate Defendants failed to obtain required authorization for recurring charges to consumers’ accounts 110.

Section 903(10) of EFTA, 15 U.S.C. § 1693a(10), provides that the term “preauthorized electronic fund transfer” means “an electronic fund transfer authorized in advance to recur at substantially regular intervals[.]”

111.

Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), provides that a “preauthorized” electronic fund transfer from a consumer’s account must be “authorized by the consumer only in writing, and a copy of such authorization shall be provided to the consumer when made.” Section 1005.10(b) of EFTA’s implementing regulation, Regulation E, 12 C.F.R. Part 1005, requires that “[p]reauthorized electronic fund transfers from a consumer’s account may be authorized only by a writing signed or similarly authenticated by the consumer. The person that obtains the authorization shall provide a copy to the consumer.”

112.

Section 1005.10 of the Official Interpretations to Regulation E, 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 5, clarify that “[t]he authorization process should evidence the consumer’s identity and assent to the authorization.” The Interpretations further clarify that “[a]n authorization is valid if it is readily identifiable as such and the terms of the preauthorized transfer are clear and readily understandable.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 6. 113.

Some consumers entered their debit card information into Corporate Defendants’ enrollment forms, including Homepage Enrollment Forms and Affiliate Enrollment Forms. Corporate Defendants debited these consumers’ monthly charges for TU Credit Monitoring from the consumers’ bank accounts.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 26 of 54 PageID #:26

Page 28

114.

Corporate Defendants’ monthly charge for TU Credit Monitoring to a debit card is a “preauthorized electronic fund transfer” within the meaning of EFTA. Corporate Defendants’ enrollment forms contain no separate language of consumer authorization for a specific amount of recurring payments to be charged to consumers’ debit cards. 115.

For example, in the Homepage Enrollment Form, the button below the payment information field labeled “I Accept & Continue to Step 3” is accompanied by an explanation of some usages of the consumer’s information that the consumer is accepting, but it makes no mention of recurring payments.

116.

Specifically, just above the button, the Homepage Enrollment Form states: “By clicking on the “I Accept & Continue to Step 3” button below, you are providing written instructions to [TUI] authorizing [TUI] to obtain and use on a recurring basis with your membership, personal information that you provide during the enrollment process, as well as information from your credit profiles at Transunion, Experian and/or Equifax to confirm your identity, display your credit data to you and provide you with personalized offers from Transunion’s partners that are based on your personal information and credit scores.” 117.

Likewise, in the Affiliate Enrollment Forms in Appendix D, the text below the debit or credit card information field states, “You are agreeing to the service agreement and providing written instructions to [TUI] to obtain information from your personal credit profile from Experian, Equifax, and/or TransUnion. You authorize [TUI] to obtain such information solely to confirm your identity and display your credit data to you.” The text is accompanied by an orange button that states “VIEW CREDIT SCORE.”

118.

In the Homepage and Affiliate Enrollment Forms, other than the variations of them for California consumers as described below, the sole references to specific charges appear on other pages of the forms where consumers are asked to enter only identifying information such as address and date of birth. These disclosures are inadequate and misleading. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 27 of 54 PageID #:27

Page 29

119.

For the Homepage Enrollment Form, the consumer’s clicking “I Accept & Continue to Step 3” is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 120.

For the Affiliate Enrollment Form, the consumer’s clicking “VIEW CREDIT SCORE” is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 121.

For California consumers only, the disclosure above “I Accept & Continue to Step 3” in the Homepage Enrollment Form includes additional language regarding monthly payments. But given the placement and content of this additional language, the consumer’s clicking “I Accept & Continue to Step 3” in this context is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 122.

Consequently, Corporate Defendants’ recurring charges to consumers who enrolled in TU Credit Monitoring using the Homepage Enrollment Form, Affiliate Enrollment Forms, or similar forms and paid with a debit card were not authorized in accordance with the requirements of EFTA and Regulation E.

123.

Further, as Corporate Defendants never obtained an adequate signed or authenticated statement that consumers authorized recurring charges on their debit cards to pay for TU Credit Monitoring, Corporate Defendants could not and did not provide a copy of such a statement to the consumer, as required by EFTA and Regulation E. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 28 of 54 PageID #:28

Page 30

Corporate Defendants Violated the Order and Regulation V and Engaged in Deceptive Acts and Practices in Their Marketing of Credit-Related Products on annualcreditreport.com 124.

The Fair Credit Reporting Act (FCRA) imposes on each NCRA an obligation to provide a free file disclosure (i.e., credit report) once every 12 months to any consumer who requests it. 15 U.S.C. § 1681j(a). Regulation V, FCRA’s implementing regulation, requires all NCRAs to jointly design, fund, implement, maintain, and operate a “centralized source” to enable consumers to obtain free annual file disclosures from all NCRAs. 12 C.F.R. § 1022.136. The centralized source for free annual file disclosures is the website annualcreditreport.com. 125.

A consumer who seeks to obtain her free credit report through annualcreditreport.com must first provide certain identifying information on the website, including her name, social security number, and current address. The consumer must then answer questions to verify her identity, which are similar to those in page 3 of the Homepage Enrollment Form. The consumer is then given a choice to obtain her file disclosure from one or more of the NCRAs, including Corporate Defendants.

126.

Corporate Defendants control the placement of advertising for TransUnionbranded products and services on annualcreditreport.com and operate the website that consumers access through annualcreditreport.com to obtain their free annual file disclosures from Corporate Defendants.

127.

Between February 2014 and March 2020, when Corporate Defendants delivered a free annual file disclosure to a consumer, Corporate Defendants placed a prominent “Call to Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 29 of 54 PageID #:29

Page 31

Action” button advertisement for a “credit score” at the top of the free annual file disclosure. The image in Figure 5 is one of the advertisements used frequently by Corporate Defendants:

Figure 5 128.

The button advertisement was a misrepresentation. By inviting consumers to “see” or “add” their “credit score,” the button gave consumers the false impression that the credit score was part of their free file disclosure. But in reality, the product Corporate Defendants were advertising was their bundled, paid subscription product, TU Credit Monitoring. 129.

Corporate Defendants designed the button advertisements to appear in a bright color and large font, and strategically placed them just under the consumer’s name on the free file disclosure. The button’s placement compounded the false impression that the “score” was part of the consumer’s free file disclosure. The button was much more prominent than, and placed above, the option to print or save a pdf of the file disclosure, which was located in much smaller print below the ad.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 30 of 54 PageID #:30

Page 32

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 31 of 54 PagelD #:31

130. Figure 6 reflects the placement of the button advertisement on a test consumer's

file disclosure:

TransUnion-

Your Credit Report

Credit Report Score 1D Protection » Your Rights INITIATE A DISPUTE Personal Credit Report for = &) Found an inemcuracy? Source: TransUnion Click to learn about correcting. Would you like to add your TransUnion Credit Score? YES, I'D LIKE TOSEE MY SCORE &)

Offer details

For y — vera so the ne al lata y tered wire wey & Print report DZ Save as POE

Sosf Seeciue VPage COM verre P

We recommend that you print or save this page. Ciosing thic window | Smouc* magne :

will end the free credit report request process and you will be unable “Se to return for a year TB >> i want my Credit Score * For your convenience we will ase the data you supplied to us in the order process.

se ad Sor your protecden oemeneein a

Names Reported: ay

Figure 6

131. The misrepresentation created by the button advertisement was material. By

giving consumers the false impression that the score was part of their free annual file disclosure,

Page 33

the button advertisements influenced many consumers to click on them unwittingly. Consumers, acting reasonably under the circumstances, were misled by the button advertisements. 132.

Corporate Defendants’ button advertisement offered a “credit score” ancillary to consumers’ receipt of their free file disclosure. Therefore, the button advertisement falsely represented that the “credit score” was free.

133.

The button advertisements interfered with, detracted from, contradicted, or otherwise undermined the purpose of annualcreditreport.com. Upon clicking on the button advertisements, consumers were diverted from their free annual file disclosure on annualcreditreport.com and into an enrollment process that was substantially similar to the Homepage Enrollment Form, except that consumers had already answered identity verification questions similar to those in page 3 of the Homepage Enrollment Form in order to obtain their free report. Some consumers were unable to return to their free annual file disclosure after being diverted to the enrollment process, even if they did not ultimately enroll in the product. 134.

By misrepresenting, expressly or impliedly, that the credit score was free, the button advertisement on consumers’ free file disclosures also violated Paragraph 40(a)(i) of the Order.

135.

By misrepresenting, expressly or impliedly, that the score was part of the consumer’s annual file disclosure when, in truth and in fact, a material condition of receiving the score was enrollment in a paid subscription product, the button advertisement on consumers’ free file disclosures also violated Paragraph 40(a)(iii) of the Order. 136.

Just since January 3, 2017, Corporate Defendants have received hundreds of complaints and refund requests from consumers who had sought to obtain their free annual file disclosures from annualcreditreport.com and did not understand how they came to be enrolled in a paid monthly subscription product.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 32 of 54 PageID #:32

Page 34

137.

Corporate Defendants’ misrepresentations in connection with providing consumers’ free file disclosures violated Paragraphs 40(a)(i) and (iii) of the Order, 12 C.F.R. §§ 1022.136(g)(2)-(3), and were deceptive.

Corporate Defendants Violated the Order and Engaged in Deceptive Acts and Practices by Making it Difficult and Confusing for Consumers to Cancel Subscriptions for Credit-Related Products 138.

Paragraph 40(b)(ii) of the Order requires Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, to “provide a simple mechanism for a consumer to immediately cancel the purchase of any Credit- Related Product, and stop billing and collecting payments for any recurring charge for any good or service.” It further requires that the cancellation mechanism “must not be difficult, costly, confusing, or time consuming, and must, at a minimum, be substantially similar to the mechanism(s) the consumer used to initiate the purchase of any Credit-Related Product[.]” 139.

As of at least the Effective Date until the present, Corporate Defendants have not provided any online mechanism for consumers to immediately cancel the purchase of a Credit- Related Product. Rather, consumers who inadvertently enroll into a Credit-Related Product and want to immediately cancel the purchase must call Corporate Defendants’ customer service line. But even when consumers called, Corporate Defendants often refused to allow consumers to immediately cancel their purchases and obtain a refund. Corporate Defendants would, instead, tell consumers that they would remain enrolled in the product for the remainder of the month they had inadvertently purchased, and no refund would be given. Cancelling the purchase thus was “time-consuming,” and it was not “immediate[],” “simple,” or “substantially similar” to the online mechanism the consumer used to initiate the purchase. 140.

Corporate Defendants have also not provided a simple mechanism for cancellation of future recurring charges. Though Corporate Defendants added an online cancellation function to their website after the Order, it is difficult to locate: many consumers have complained that Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 33 of 54 PageID #:33

Page 35

they were not able to find it and had to call Corporate Defendants’ customer service line to cancel future payments.

141.

Specifically, since shortly after the Order’s Effective Date through the present, a consumer who would like to cancel a TU Credit Monitoring subscription online must first go to a small “support” link on the homepage. Then, the consumer must click on language that says, “You may cancel your membership here.”

142.

But instead of allowing the consumer to cancel at that point, Corporate Defendants take the consumer through a series of confusing screens and questions designed to keep the consumer enrolled in TU Credit Monitoring.

143.

First, Corporate Defendants present the consumer with additional information about product benefits and what the consumer would “lose” by canceling TU Credit Monitoring. At the bottom of the product benefits screen, Corporate Defendants present the consumer with a confusing choice:

Figure 7 144.

The prominent yellow button on the right of Figure 7 offers to take the consumer “BACK TO MY DASHBOARD.” This is confusing because it actually means that the consumer will exit the cancellation process and will continue to be enrolled in TU Credit Monitoring. 145.

After clicking on the less prominent blue “Continue & Cancel” text, many consumers are taken to yet another screen and presented with various retention offers for discounts to TU Credit Monitoring. At the bottom of the retention offer screen, reflected in Figure Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 34 of 54 PageID #:34

Page 36

8, the consumer is presented again with a choice between a prominent yellow button and smaller blue text.

Figure 8 146.

The prominent yellow button in Figure 8 takes the consumer out of the cancellation process and the consumer remains enrolled in TU Credit Monitoring. Only when a consumer clicks on the blue “Cancel My Membership” text is the consumer allowed to cancel the TU Credit Monitoring subscription.

147.

Corporate Defendants’ cancellation process for Credit-Related Products therefore has been and remains difficult, costly, confusing or time-consuming. 148.

Corporate Defendants have received thousands of refund requests and hundreds of complaints from consumers who wished to cancel their subscriptions and were unable to do so online.

149.

After the Effective Date through the present, and despite knowing that consumers found the cancellation process to be difficult, costly, confusing, and time-consuming, Corporate Defendants failed to make their cancellation mechanism simple, in violation of Paragraph 40(b)(ii) of the Order.

150.

In addition, after consumers cancel their TU Credit Monitoring subscriptions, whether refunds are given or not, Corporate Defendants mount a campaign of deception to induce consumers to re-enroll in the product. Upon cancelling, consumers receive an email warning that if they do not re-enroll in TU Credit Monitoring, the consumer will no longer be able to “make your TransUnion report off-limits to thieves with 1-touch Credit Lock.” The consumer Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 35 of 54 PageID #:35

Page 37

is also warned in a second email at the end of the final month of enrollment that “Your credit report is unlocked.”

151.

These emails give consumers the misleading impression that they have publicly exposed the information in their TransUnion credit report by cancelling, and that re-enrolling in the product is the only way that consumers can protect the information in their credit report from “thieves.”

152.

In reality, the cancellation of a TU Credit Monitoring subscription should simply return the consumer’s credit report to the same status as before he or she enrolled in TU Credit Monitoring, and should not cause the consumer’s information to become publicly exposed. In addition, a free security freeze provides the same security features as the (not free) TU Credit Monitoring “Credit Lock.” Both block new application inquiries on a consumer’s credit file. 153.

Corporate Defendants’ website compounded the misleading nature of their reenrollment messages by making false statements. For example, on a webpage titled “Why Credit Lock is a Game Changer,” Corporate Defendants misrepresented until at least May 2021 that a TU Credit Monitoring “Credit Lock” is better than a security freeze because security freezes are “pretty dramatic” and cost consumers $2-$10 depending on the state where a consumer lives. But in reality, under federal law, a consumer has been able to freeze or unfreeze his or her credit report with any NCRA at no charge since September 21, 2018, and obtain the same security features as the (not free) TU Credit Monitoring “Credit Lock.”

154.

The false and misleading representations made in Corporate Defendants’ postcancellation emails were likely to affect consumers’ conduct or decisions regarding whether to reenroll into a TU Credit Monitoring subscription.

155.

By misrepresenting facts material to consumers, the post-cancellation emails also violated Paragraph 40(a)(iii) of the Order. This conduct was also deceptive.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 36 of 54 PageID #:36

Page 38

Corporate Defendants Violated the Order by Failing to Collect, Review and Assess Information and Data for Evidence of Consumer Confusion 156.

Paragraph 40(d) of the Order requires Corporate Defendants and their officers to regularly collect, review and assess, among other things, consumer complaints, cancellation rates, and empirical data regarding consumers’ perceptions of Corporate Defendants’ advertising for evidence of consumer confusion about the Credit-Related Products, including the price and other material terms of those products. Paragraph 40(d) also requires Corporate Defendants and their officers to regularly review, assess and, as necessary, modify Corporate Defendants’ advertising “to improve consumer understanding of Credit-Related Products in light of empirical evidence.” 157.

Corporate Defendants and their officers have failed to undertake the required collection, review and assessment of consumer complaints and empirical data, or the review, assessment and modification of their advertisements as required by the Order. Corporate Defendants Violated the Order by Failing to Create and Retain Required Records 158.

Paragraph 68 of the Order requires Corporate Defendants to create and retain for at least five years from the Effective Date of the Order nine specified categories of documents related to the violations addressed in the Order.

159.

Corporate Defendants failed to create and retain the records required under the Order.

Corporate Defendants Violated the Order by Failing to Distribute It to, and Obtain Acknowledgements from Required Persons 160.

Under Paragraph 65 of the Order, within 30 days of the Effective Date, Corporate Defendants were required to deliver a copy of the Order to “each of their board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who have responsibilities related to the subject matter of the [Order].” 161.

Paragraph 66 of the Order requires that, for five years from the Effective Date, Corporate Defendants must deliver a copy of the Order to “any future board members and Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 37 of 54 PageID #:37

Page 39

executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who will have responsibilities related to the subject matter of the [Order] before they assume their responsibilities.” 162.

Paragraph 67 of the Order requires that Corporate Defendants secure a signed and dated statement acknowledging receipt of a copy of the Order within 30 days of delivery from all persons receiving a copy of the Order under Paragraphs 65 and 66 of the Order. 163.

Corporate Defendants did not secure the required acknowledgment of receipt of the Order from all executive officers as required by the Order. 164.

Specifically, Corporate Defendants did not secure the required acknowledgement from the Company’s current Chief Executive Officer until March 23, 2021 – approximately 22 months after he assumed his responsibilities as CEO and a member of the TransUnion board. 165.

Corporate Defendants also failed to deliver a copy of the Order to numerous other board members and executive officers before they assumed their duties, as required by Paragraph 66 of the Order, or to timely secure from those individuals the acknowledgment required by Paragraph 67 of the Order.

DANAHER’S ORDER VIOLATIONS 166.

As the President of TUI for many years before the Effective Date until on or about April 1, 2021, and as Executive Vice President of TUI from April 2, 2021 until at least February 1, 2022, Danaher was responsible for, had the authority to control, and did in fact control, the manner in which TUI marketed Credit-Related Products to consumers. 167.

Danaher has had actual notice of the Order since January 3, 2017. 168.

Danaher, acting directly or indirectly, including through omissions or failures to act, violated Consent Order Paragraph 40 and its subparagraphs (a)-(d). 169.

From at least the Effective Date through the present, Danaher has had actual knowledge of, or recklessly disregarded, TUI’s violations of the Order. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 38 of 54 PageID #:38

Page 40

170.

Notwithstanding his personal legal obligations (as specified by Order Paragraphs 40 and its subparagraphs (a)-(d)) as TUI’s President and Executive Vice President with actual notice of the Order, Danaher failed to ensure Corporate Defendants’ compliance with the Order, despite having the authority to do so and knowledge or reckless disregard of the Consent Order violations committed by Corporate Defendants.

171.

In fact, Danaher, along with others, determined that complying with the Order would reduce TUI’s revenue and created a plan to delay or avoid implementation of the requirements of Paragraph 40 of the Order. Among other things, shortly after the Effective Date, Danaher determined that using the affirmative selection checkbox required by Order Paragraph 40(b)(i) in connection with Negative Option enrollments resulted in fewer enrollments into TU Credit Monitoring and therefore lower revenue. Danaher instructed TUI to cease using the checkbox in Affiliate marketing, leading to millions of enrollments that violated the Order. COUNT I: VIOLATIONS OF THE ORDER (CORPORATE DEFENDANTS) 172.

The Bureau incorporates the allegations set forth in Paragraphs 1–109 and 124– 171 of this Complaint.

173.

Under § 1036(a)(1)(A) of the CFPA, it is unlawful for covered persons, such as Corporate Defendants, to “offer or provide to a consumer any financial product or service not in conformity with Federal consumer financial law, or otherwise commit any act or omission in violation of a Federal consumer financial law[.]” 12 U.S.C. § 5536(a)(1)(A). 174.

“Federal consumer financial law” is defined to include an “order prescribed by the Bureau.” 12 U.S.C. § 5481(14).

175.

The Order is an “order prescribed by the Bureau.”

176.

Corporate Defendants, acting directly and indirectly, through the TU Common Enterprise, or through an agent, violated the Order by: Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 39 of 54 PageID #:39

Page 41

a. misrepresenting, expressly or impliedly, material facts about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges, in violation Paragraph 40(a)(i) of this Order, as set forth in: i. Paragraphs 45–55 of this Complaint (misrepresenting consumers’ enrollment status);

ii. Paragraphs 105–109 of this Complaint (misrepresenting that scores or reports were “free” or “$1”), and iii. Paragraphs 124–137 of this Complaint (misrepresenting that scores on annualcreditreport.com were part of a consumer’s free file disclosure);

b. misrepresenting, expressly or impliedly, material facts about the timing or manner of any charge or bill, the purpose for which a consumer’s credit card or payment information will be used, the date(s) upon which the consumer will be charged or billed, and the deadline by which the consumer must act in order to stop any charges, in violation of Paragraph 40(a)(ii) of the Order, as set forth in Paragraphs 78–91 of this Complaint (misrepresenting that payment information would be used for identity verification purposes);

c. misrepresenting, expressly or impliedly, material facts about the conditions, nature, or central characteristics of TU Credit Monitoring, in violation of Paragraph 40(a)(iii) of the Order, as set forth in: Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 40 of 54 PageID #:40

Page 42

i. Paragraphs 32–44 of this Complaint (misrepresenting the nature of TU Credit Monitoring by advertising it as merely a “score” or “report”);

ii. Paragraphs 45–55 of this Complaint (misrepresenting consumers’ enrollment status in TU Credit Monitoring); iii. Paragraphs 124–137 of this Complaint (misrepresenting that a score was part of a consumer’s annual file disclosure when receiving the score was conditioned on enrollment in a paid subscription product); and iv. Paragraphs 150–155 of this Complaint (misrepresenting the effect of cancellation of a TU Credit Monitoring subscription on a consumer’s credit report);

d. failing to obtain express informed consent from consumers before enrolling them into products with Negative Option features, in violation of Paragraph 40(b)(i) of the Order, as set forth in Paragraphs 92–104 of this Complaint;

e. failing to provide consumers with a simple mechanism that is not costly, confusing, or time consuming for cancellation of enrollment, and failing to permit consumers to immediately cancel a purchase, in violation of Paragraph 40(b)(ii) of the Order, as set forth in in Paragraphs 138–155 of this Complaint;

f. offering or providing VantageScore credit scores to consumers without required disclosures, in violation of Paragraph 40(c) of the Order, as set forth in Paragraphs 56–77 of this Complaint; g. failing to collect, review and assess the required information and data, and failing to modify their advertising of Credit-Related Products in light Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 41 of 54 PageID #:41

Page 43

thereof, in violation of Paragraph 40(d) of the Order, as set forth in Paragraphs 156–157 of this Complaint;

h. failing to deliver the Order to, and obtain a signed and dated acknowledgment of receipt of the Order from, all board members, executive officers, and other required recipients, in violation of Paragraphs 65-67 of the Order, as set forth in Paragraphs 160–165 of this Complaint; and i. failing to create or retain required records, in violation of Paragraph 68 of the Order, as set forth in Paragraphs 158–159 of this Complaint. 177.

By violating the requirements of Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), and (d) of the Order, Corporate Defendants offered and provided to consumers financial products and services not in conformity with Federal consumer financial law. 178.

By violating the requirements of Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), and (d) and 65-68 of the Order, Corporate Defendants committed acts or omissions that violated Federal consumer financial law.

179.

Accordingly, Corporate Defendants violated § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another. COUNT II: VIOLATIONS OF THE ORDER (DANAHER) 180.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–157; and 166–171 of this Complaint.

181.

Under § 1036(a)(1)(A) of the CFPA, it is unlawful for covered persons to “offer or provide to a consumer any financial product or service not in conformity with Federal consumer financial law, or otherwise commit any act or omission in violation of a Federal consumer financial law[.]” 12 U.S.C. § 5536(a)(1)(A).

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 42 of 54 PageID #:42

Page 44

182.

“Federal consumer financial law” is defined to include an “order prescribed by the Bureau.” 12 U.S.C. § 5481(14).

183.

The Order is an “order prescribed by the Bureau.” 184.

Danaher has had actual knowledge of the Order since January 3, 2017. 185.

As President of TUI, after the Order’s Effective Date until April 1, 2021, and as Executive Vice President of TUI from April 2, 2021 until at least February 1, 2022, Danaher had responsibility for ensuring that TUI complied with Federal consumer financial law and the Order. 186.

From at least January 3, 2017 until at least February 1, 2022, as an officer of TUI, Danaher was a “related person” and a “covered person” under the CFPA, 12 U.S.C. § 5481(25). 187.

Danaher, acting directly or indirectly, violated the Order, including by failing to ensure that TUI took the affirmative actions required by Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), and (d) of the Order and refrained from engaging in acts prohibited by those paragraphs of the Order, as set forth in Paragraph 176(a)–(g).

188.

Therefore, Danaher committed acts and omissions in violation of a Federal consumer financial law.

189.

Accordingly, Danaher violated § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A).

COUNT III: DECEPTIVE ACTS AND PRACTICES (CORPORATE DEFENDANTS) 190.

The Bureau incorporates the allegations set forth in Paragraphs 1–171 of this Complaint.

191.

Section 1036(a)(1)(B) of the CFPA prohibits covered persons from engaging in deceptive acts or practices. 12 U.S.C. § 5536(a)(1)(B). 192.

An act or practice is deceptive if it involves a material misrepresentation or omission that is likely to mislead consumers acting reasonably under the circumstances. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 43 of 54 PageID #:43

Page 45

Information is material to consumers if it is likely to affect a consumer’s conduct regarding the product or service.

193.

Corporate Defendants, acting directly and indirectly, through the TU Common Enterprise, or through an agent, have engaged in the following deceptive acts and practices: a. Deceptive Acts and Practices Regarding the Nature and Central Characteristics of TU Credit Monitoring 194.

Corporate Defendants’ representations about the nature and central characteristics of TU Credit Monitoring, made from the Effective Date through the present, have been deceptive.

195.

As set forth in Paragraphs 32–44 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that Corporate Defendants offered consumers the ability to see or purchase a standalone credit report or score. 196.

These representations were false because, in truth and in fact, Corporate Defendants were actually offering an ongoing subscription for credit monitoring and were not offering consumers the ability to see or purchase a standalone credit report or score. b. Deceptive Acts and Practices Regarding Consumers’ Enrollment Status 197.

Corporate Defendants’ representations in marketing emails about consumers’ enrollment status in TU Credit Monitoring, made from the Effective Date through the present, have been deceptive.

198.

As set forth in Paragraphs 45–55 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that consumers are already signed up for, and entitled to the benefits of, TU Credit Monitoring without cost or obligation. 199.

These representations were false because, in truth and in fact, the consumers were not yet signed up for or entitled to the benefits of TU Credit Monitoring. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 44 of 54 PageID #:44

Page 46

c. Deceptive Acts and Practices in Connection with Enrollment Processes 200.

Corporate Defendants’ representations in connection with the TU Credit Monitoring enrollment process, made from the Effective Date through the present, have been deceptive.

201.

As set forth in Paragraphs 78–91 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that they are requesting consumers’ debit or credit card information for reasons other than to charge the consumer. 202.

These representations were false because, in truth and in fact, Corporate Defendants requested consumers’ payment information in order to charge consumers, and consumers who provided debit or credit card information were immediately charged for the TU Credit Monitoring product.

d. Deceptive Acts and Practices Regarding the Nature of the Credit Score Offered 203.

Corporate Defendants’ representations regarding the nature of the credit scores it offered or provided to consumers, made from the Effective Date through the present, have been deceptive.

204.

As described in Paragraphs 56–77 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that the VantageScore credit scores Corporate Defendants offer or provide to consumers may be the same scores typically used by lenders or other commercial users for credit decisions. 205.

The representations are unsubstantiated and, therefore, deceptive because Corporate Defendants lack a reasonable basis to assert that a consumer’s lender would use the VantageScore, instead of any other of the hundreds of available credit score models. e. Deceptive Acts and Practices Regarding “Free” or “$1” Credit Scores and Reports 206.

Corporate Defendants’ representations regarding “free” and “$1” scores and reports, made from the Effective Date through the present, have been deceptive. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 45 of 54 PageID #:45

Page 47

207.

As described in Paragraphs 92–109 of this Complaint, Corporate Defendants represented, directly or indirectly, expressly or impliedly, that consumers could obtain a “free” or “$1” score or report in its advertisements for TU Credit Monitoring. 208.

These representations were false because, in fact, these advertisements were associated with a Negative Option billing structure and a trial offer for a subscription. Consumers who did not cancel their subscriptions were immediately enrolled in an indefinite paid monthly subscription for TU Credit Monitoring.

f. Deceptive Acts and Practices in Connection with Marketing on annualcreditreport.com 209.

Corporate Defendants’ marketing of Credit-Related Products on the website annualcreditreport.com was deceptive.

210.

As described in Paragraphs 124–137 of this Complaint, Corporate Defendants have represented directly or indirectly, expressly or impliedly, that consumers’ credit scores were free as a part of their free annual file disclosure.

211.

These representations were false because, in truth and in fact, Corporate Defendants did not offer consumers free credit scores in connection with their annual file disclosures, but instead enrolled consumers into an indefinite paid monthly subscription product that included a credit score.

g. Deceptive Acts and Practices Regarding Effect of Cancelling TU Credit Monitoring Subscriptions 212.

As set forth in Paragraphs 138–155 of this Complaint, Corporate Defendants have represented, directly and indirectly, expressly or impliedly, that consumers have publicly exposed their credit report information by cancelling their subscriptions to TU Credit Monitoring and that re-enrolling in the product is the only way they can protect their credit report information. 213.

These representations were false because the cancellation of a TU Credit Monitoring subscription does not cause the consumer’s credit report information to become Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 46 of 54 PageID #:46

Page 48

publicly exposed, and a free security freeze would provide the same security features as the Credit Lock option included in the TU Credit Monitoring subscription. * * * 214.

The misrepresentations cited in paragraphs 190–213 were material and likely to mislead consumers acting reasonably under the circumstances. 215.

Thus, Corporate Defendants engaged in deceptive acts and practices in violation of §§ 1031(a) and 1036(a)(1)(B) of the CFPA. 12 U.S.C. §§ 5531(a), 5536(a)(1)(B). 216.

Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents of one another. COUNT IV: SUBSTANTIAL ASSISTANCE (TRANSUNION) 217.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–179; and 190–216 of this Complaint.

218.

Under § 1036(a)(3) of the CFPA, it is unlawful for “any person to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the provisions of section 1031, or any rule or order issued thereunder, and notwithstanding any provision of this title, the provider of such substantial assistance shall be deemed to be in violation of that section to the same extent as the person to whom such assistance is provided.” 12 U.S.C. § 5536(a)(3).

219.

The Order is an “order issued” under section 1031 of the CFPA. 220.

TULLC and TUI are each “a covered person or service provider.” 221.

As described in Counts I and III, TUI violated § 1031 of the CFPA. 222.

As described in Counts I and III, TULLC violated § 1031 of the CFPA. 223.

Through its governance and other support of TULLC and TUI, and through its common enterprise activities with them, TransUnion has associated itself with their venture and Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 47 of 54 PageID #:47

Page 49

has participated in their marketing efforts as something that it wished to bring about and has sought by its actions to make succeed.

224.

As a party to the Order with actual knowledge of the Order’s requirements, as the entity with ultimate responsibility to ensure TULLC and TUI complied with the Order, and through its governance and common enterprise activities with TULLC and TUI, TransUnion knew about or was reckless with respect to the conduct detailed in Count I and Count III. 225.

TransUnion violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TULLC and TUI in connection with their violations of § 1031 of the CFPA. 12 U.S.C. § 5536(a)(3).

226.

TransUnion violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TULLC and TUI in connection with their violations of the Order. 12 U.S.C. § 5536(a)(3).

COUNT V: SUBSTANTIAL ASSISTANCE (TULLC) 227.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–179; and 190–216 of this Complaint.

228.

Under § 1036(a)(3) of the CFPA, it is unlawful for “any person to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the provisions of section 1031, or any rule or order issued thereunder, and notwithstanding any provision of this title, the provider of such substantial assistance shall be deemed to be in violation of that section to the same extent as the person to whom such assistance is provided.” 12 U.S.C. § 5536(a)(3).

229.

The Order is an “order issued” under section 1031 of the CFPA. 230.

TUI is “a covered person or service provider.”

231.

As described in Counts I and III, TUI violated § 1031 of the CFPA. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 48 of 54 PageID #:48

Page 50

232.

Through its governance and other support and common enterprise activities with TUI, which include TULLC’s ability, as an NCRA, to advertise to consumers on annualcreditreport.com, and its collection and maintenance of shared consumer financial data, creation of consumer reports, and creation of other products for use by consumers, TULLC has associated itself with TUI’s venture and has participated in its marketing efforts as something that it wished to bring about, and has sought by its actions to make succeed. 233.

As a party to the Order with actual knowledge of its content and through its common enterprise activities with TUI, TULLC knew about or was reckless with respect to the conduct detailed in Count I and Count III.

234.

TULLC violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TUI in violation of § 1031 of the CFPA. 12 U.S.C. § 5536(a)(3). 235.

TULLC violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TUI in connection with its violations of the Order. 12 U.S.C. § 5536(a)(3). COUNT VI: VIOLATION OF EFTA AND REGULATION E (CORPORATE DEFENDANTS) 236.

The Bureau incorporates the allegations set forth in Paragraphs 1–22 and 78–123 of this Complaint.

237.

Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), requires that a “preauthorized” electronic fund transfer from a consumer’s account must be “authorized by the consumer only in writing, and a copy of such authorization shall be provided to the consumer when made.” 238.

Section 903(10) of EFTA, 15 U.S.C. § 1693a(10), provides that the term “preauthorized electronic fund transfer” means “an electronic fund transfer authorized in advance to recur at substantially regular intervals.”

239.

Section 1005.3 of Regulation E, entitled “Coverage,” states: “For purposes of §…1005.10(b)…, this part applies to any person, other than a person excluded from coverage of this part by section 1029 of the [CFPA].” 12 C.F.R. § 1005.3(a). Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 49 of 54 PageID #:49

Page 51

240.

Section 1005.10(b) of Regulation E provides that “[p]reauthorized electronic fund transfers from a consumer’s account may be authorized only by a writing signed or similarly authenticated by the consumer. The person that obtains the authorization shall provide a copy to the consumer.” 12 C.F.R. § 1005.10(b).

241.

Section 1005.10 of the Official Interpretations to Regulation E clarify that “[t]he authorization process should evidence the consumer’s identity and assent to the authorization.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 5. The Official Interpretations further clarify that “[a]n authorization is valid if it is readily identifiable as such and the terms of the preauthorized transfer are clear and readily understandable.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 6.

242.

Corporate Defendants are each a “person” within the meaning of Section 1005.3 of Regulation E, and not excluded from the Bureau’s authority under Section 1029 of the CFPA. Corporate Defendants’ monthly charge for TU Credit Monitoring is a “preauthorized electronic fund transfer” within the meaning of EFTA and Regulation E. 243.

Corporate Defendants’ enrollment forms, including the Homepage Enrollment Form and the Affiliate Enrollment Forms, do not convey the terms of the preauthorized transfer in a clear and readily understandable way.

244.

In numerous instances, Corporate Defendants have debited consumers’ bank accounts on a recurring basis without obtaining a written authorization signed or similarly authenticated from consumers for preauthorized electronic fund transfers from their accounts, thereby violating Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), and Section 1005.10(b) of Regulation E, 12 C.F.R. § 1005.10(b). Thus, Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another.

245.

Further, in numerous instances, Corporate Defendants have debited consumers’ bank accounts on a recurring basis without providing a copy of written authorization signed or Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 50 of 54 PageID #:50

Page 52

similarly authenticated by the consumer for preauthorized electronic fund transfers from the consumer’s account, thereby violating Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), and Section 1005.10(b) of Regulation E, 12 C.F.R. § 1005.10(b). Thus, Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another.

COUNT VII: VIOLATION OF REGULATION V (CORPORATE DEFENDANTS) 246.

The Bureau incorporates the allegations set forth in Paragraphs 1–22; 32–44; and 124–137 of this Complaint.

247.

Under Regulation V, any communications, instructions, or permitted advertising or marketing on annualcreditreport.com must not “interfere with, detract from, contradict, or otherwise undermine the purpose” of the site, which is “to enable consumers to make a single request to obtain annual file disclosures from” the NCRAs, including Corporate Defendants. 12 C.F.R. §§ 1022.136(a), (g).

248.

Examples of interfering, detracting, inconsistent or undermining communications include “materials that falsely represent, expressly or by implication, that a product or service offered ancillary to receipt of a file disclosure, such as a credit score or credit monitoring service, is free[.]” 12 C.F.R. § 1022.136(g)(3)(iii).

249.

Corporate Defendants placed or caused to be placed advertisements on consumers’ free file disclosures in a manner that interfered with, detracted from, contradicted, and undermined the purpose of annualcreditreport.com by falsely representing, expressly or by implication, that consumers’ credit scores were part of their free annual file disclosure and by diverting consumers from their annual file disclosure into paid subscription products. 250.

Thus, Corporate Defendants’ advertisements on annualcreditreport.com violated Regulation V, 12 C.F.R. § 1022.136(g), and Corporate Defendants are each liable for these Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 51 of 54 PageID #:51

Page 53

violations directly, through the TU Common Enterprise, and as principals or agents for one another.

COUNT VIII: VIOLATIONS OF THE CFPA BASED ON VIOLATIONS OF REGULATION V, EFTA, AND REGULATION E (CORPORATE DEFENDANTS) 251.

The Bureau incorporates the allegations set forth in Paragraphs 1–22; 32–44; 78– 137; and 236–250 of this Complaint.

252.

The CFPA defines “Federal consumer financial law” to include most provisions of the FCRA and its implementing regulation, Regulation V, including those cited in Count VII, and EFTA and its implementing regulation, Regulation E, including those cited in Count VI. 12 U.S.C. §§ 5481(12)(C), (F), (14).

253.

TransUnion, TULLC, and TUI are covered persons under the CFPA. 12 U.S.C. § 5481(6).

254.

Under the CFPA, a covered person’s violation of a Federal consumer financial law, which includes the enumerated consumer laws and rules thereunder, violates the CFPA. 12 U.S.C. §§ 5536(a)(1)(A), 5481(14).

255.

Corporate Defendants’ violations of Regulation V, described in Count VII, are violations of § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise and as principals or agents for one another.

256.

Corporate Defendants’ violations of EFTA and Regulation E, described in Count VI, are violations of § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise and as principals or agents for one another.

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 52 of 54 PageID #:52

Page 54

DEMAND FOR RELIEF Accordingly, the Bureau requests that the Court: 1.

permanently enjoin all Defendants from committing future violations of the CFPA, EFTA, Regulation E, Regulation V, or any provision of “Federal consumer financial law,” as defined by 12 U.S.C. § 5481(14);

2.

grant additional injunctive relief against each of the Defendants as the Court deems just and proper;

3.

award damages or other monetary relief against Defendants, jointly and severally;

4.

order Defendants, jointly and severally, to refund money to consumers; 5.

order Defendants, jointly and severally, to pay restitution to consumers harmed by Defendants’ unlawful conduct;

6.

order each Defendant to pay disgorgement or compensation for unjust enrichment;

7.

impose on Defendants civil money penalties under 12 U.S.C. § 5565(c); 8.

order Defendants, jointly and severally, to pay the Bureau’s costs incurred in connection with prosecuting this action; and 9.

award additional relief as this Court deems just and proper. Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 53 of 54 PageID #:53

Page 55

Respectfully submitted,

Dated: April 12, 2022

Eric Halperin Enforcement Director

David M. Rubenstein Deputy Enforcement Director

Cynthia Gooen Lesser Assistant Deputy Enforcement Director

s/ Jessica Rank Divine

Jessica Rank Divine Tracy L. Hilmer Mary K. Warren Enforcement Attorneys

Consumer Financial Protection Bureau 1700 G Street, NW Washington, DC 20552 Telephone: (202) 435-7863 (Divine) Telephone: (202) 435-7459 (Hilmer) Telephone: (202) 435-7815 (Warren)

Email: [email protected] Email: [email protected] Email: [email protected]

Attorneys for Plaintiff Consumer Financial Protection Bureau

Case: 1:22-cv-01880 Document #: 1 Filed: 04/12/22 Page 54 of 54 PageID #:54

Page 56

APPENDIX A Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 1 of 32 PageID #:55

Page 57

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU ADMINISTRATIVE PROCEEDING File No. 201 -CFPB- In the Matter of:

CONSENT ORDER TransUnion Interactive, Inc., Trans Union, LLC, and TransUnion The Consumer Financial Protection Bureau (Bureau) has reviewed the marketing practices of TransUnion Interactive, Inc. (TUI), Trans Union, LLC (TULLC), and TransUnion (TU) (collectively Respondents, as defined below) and has identified the following law violations: (1) Respondents deceptively market credit scores to consumers by falsely representing, in violation of the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5531, 5536, that the scores they market and sell to consumers are the same scores lenders typically use to determine creditworthiness; and (2) Respondents deceptively market credit scores and creditrelated products to consumers by falsely representing, in violation of the CFPA, that the scores and products are “free” or “$1”, when, in reality, when a consumer signs up for a “free” or “$1” trial, she is automatically enrolled in a subscription program for which she is charged a recurring monthly fee unless she cancels. Under Sections 1053 and 1055 of the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5563, 5565, the Bureau issues this Consent Order (Consent Order). 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 1 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 2 of 32 PageID #:56

Page 58

I Jurisdiction 1.

The Bureau has jurisdiction over this matter under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563 and 5565.

II Stipulation 2.

Respondents have executed a “Stipulation and Consent to the Issuance of a Consent Order,” dated December 22, 2016 (Stipulation), which is incorporated by reference and is accepted by the Bureau. By this Stipulation, Respondents have consented to the issuance of this Consent Order by the Bureau under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563 and 5565, without admitting or denying the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over Respondents and the subject matter of this action.

III Definitions 3.

The following definitions apply to this Consent Order: a. “Affected Consumers” are the approximately 700,000 consumers identified by the Bureau and Respondents who were enrolled in the TUCM Product through a Negative Option offer during the Relevant Period, and then cancelled their subscriptions within two billing cycles of enrollment without receiving a refund of fees paid.

b. “Board” means TU’s duly-elected and acting Board of Directors. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 2 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 3 of 32 PageID #:57

Page 59

c. “Clearly and prominently” means “clearly and conspicuously” such that the required disclosure is difficult to miss (i.e., easily noticeable) and easily understandable by ordinary consumers, including in all the following ways: i.

In textual communications (e.g., printed publications or words displayed on the screen of an electronic device for which the communication was designed), the disclosure must be of a type size and location sufficiently noticeable for an ordinary consumer to read and comprehend, in print that contrasts with the background on which it appears; ii.

In communications disseminated orally or through audible means (e.g., radio or streaming audio), the disclosure must be delivered in a volume, speed, and cadence sufficient for an ordinary consumer to hear and comprehend it;

iii.

In communications disseminated through video means (e.g., television or streaming video), the disclosure must be in writing in a form consistent with subsection (i), and must appear on the screen for a duration sufficient for an ordinary consumer to read and comprehend it; iv.

In communications made through interactive media such as the internet, online services, and software, the disclosure must be unavoidable and presented in a form consistent with subsection (i); a disclosure is not Clear and Conspicuous if a consumer must take any action, such as clicking on a hyperlink or hovering over an icon, to see it; v.

In communications that contain both audio and visual portions, the disclosure must be presented simultaneously in both the audio and visual portions of the communication;

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 3 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 4 of 32 PageID #:58

Page 60

vi.

In all instances, the disclosure must be presented before the consumer incurs any financial obligation, and use diction and syntax that is understandable to a reasonable consumer in each language in which the representation that requires the disclosure appears; and vii.

The disclosure must not be contradicted or mitigated by, or inconsistent with, anything else in the communication with the consumer. d. “Consumer Reporting Agency” or “CRA” means a “consumer reporting agency,” as that term is defined in section 603(f) of the FCRA, 15 U.S.C. § 1681a(f). e. “Consumer Reports” means a “consumer report,” as that term is defined in section 603(d) of the FCRA, 15 U.S.C. § 1681a(d). f.

“Credit-Related Products” means any product or service Respondents offer for sale directly to consumers, including but not limited to the TUCM Product, credit scores, credit reports, credit monitoring, or identity theft insurance or protection.

g. “Consumer Complaint” means any expression of dissatisfaction by a consumer regarding Credit-Related Products.

h. “Effective Date” means the date on which the Consent Order is issued. i.

“Enforcement Director” means the Assistant Director of the Office of Enforcement for the Consumer Financial Protection Bureau, or his/her delegate.

j.

“Negative Option” means a category of commercial transactions in which a seller markets an offer for a trial period and the seller then interprets a customer’s failure to take an affirmative action, either to reject an offer or 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 4 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 5 of 32 PageID #:59

Page 61

cancel an agreement, as assent or continuing assent to be charged for goods or services.

k. “Assistant Deputy for Consumer Reporting” means the Assistant Deputy for Consumer Reporting for the Office of Supervision for the Consumer Financial Protection Bureau, or his/her delegate.

l.

“Related Consumer Action” means a private action by or on behalf of one or more consumers or an enforcement action by another governmental agency brought against Respondents based on substantially the same facts as described in Section IV of this Consent Order.

m. “Relevant Period” includes the period from July 21, 2011 until the Effective Date.

n. “Respondents” means TransUnion Interactive, Inc., TransUnion, LLC, TransUnion, and their successors and assigns. o. “TransUnion Credit Monitoring Product” or “TUCM Product” means the TransUnion Credit Monitoring bundled product that includes, among other things, a VantageScore credit score, credit report, and monthly subscriptionbased credit monitoring product, which was offered by TUI during the Relevant Period on a “free” or “$1” trial basis.

IV Bureau Findings and Conclusions The Bureau finds the following:

4.

TransUnion Interactive, Inc. (TUI), headquartered in Chicago, Illinois, is a whollyowned subsidiary of TransUnion, LLC (TULLC), a limited liability company and 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 5 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 6 of 32 PageID #:60

Page 62

Delaware corporation. TransUnion (TU) is a non-operating holding company that is the ultimate parent company of TUI and TULLC. 5.

TUI, TULLC, and TU are each a “covered person” as that term is defined by the CFPA, 12 U.S.C. § 5481(6).

6.

TULLC is a Consumer Reporting Agency and compiles and maintains financial, consumer, and commercial data across the nation and worldwide. 7.

TULLC uses credit information it has collected in consumer credit files to generate Consumer Reports. TULLC markets, sells, and provides Consumer Reports to commercial users, such as lenders, insurance companies, and potential employers. 8.

TUI generates, markets, and sells Credit-Related Products, such as credit scores, credit reports, and credit monitoring, directly to consumers using credit information from Consumer Reporting Agencies.

9.

During the Relevant Period, TUI has marketed and sold Credit-Related Products – including the TUCM Product – to consumers in various combinations. Consumers can purchase these products from TUI through a one-time transaction or through a subscription where the consumer pays a monthly fee to have continuous access to the product for as long as the consumer is enrolled in the subscription. 10.

During the Relevant Period, TUI has marketed and sold Credit-Related Products to consumers through a variety of online channels. This includes banner and display advertisements that appear on TU’s main website (TransUnion.com) and on popular websites such as auto.com, bankrate.com, Google, and Amazon; direct emails to certain consumers; and advertisements on TUI’s marketing affiliate websites.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 6 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 7 of 32 PageID #:61

Page 63

Findings and Conclusions as to Misrepresentations Relating to Credit Scores 11.

Credit scores are, among other things, numerical summaries designed to predict consumer payment behavior on a wide range of credit products. Many lenders and other commercial users rely, in part, on consumers’ credit scores when deciding whether to extend credit to a consumer.

12.

No single credit score or credit score model serves as the primary credit score for the marketplace. Lenders use a variety of credit scores, which vary by score provider, scoring model, and target industry.

13.

CRAs like TULLC, and other companies, apply various analytical scoring models to the information in consumer credit files to produce the credit scores that lenders and commercial users rely upon.

14.

Respondents generate a credit score based on a scoring model that is different from the credit score models most often used by lenders. It is based on a model from VantageScore Solutions, LLC, which has offered three versions of its score since 2011. Respondents refer to this score as the TransUnion VantageScore. 15.

TULLC has marketed the TransUnion VantageScore to lenders and other commercial users. The vast majority of credit decisions made by lenders, however, are not based on VantageScore credit scores.

16.

In addition to selling credit scores to lenders and other commercial users, the TransUnion VantageScore credit scores are marketed and sold to consumers as a part of its TUCM Product bundle.

17.

Some of the online advertisements for the TUCM Product represent to consumers that the VantageScore consumers are purchasing is the same score used by lenders 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 7 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 8 of 32 PageID #:62

Page 64

or other commercial users to determine creditworthiness. In reality, the credit score model used by any individual lender or other commercial user is highly unlikely to be the TransUnion VantageScore.

18.

For example, one such advertisement stated, “Make sure you know your Credit Score when looking for a car. Lenders typically will check your credit before buying and financing a car.” Another advertisement stated, “Make sure you know your Credit Score when looking for an apartment. Landlords may check your credit.” 19.

These advertisements implicitly represent that the VantageScore credit score that Respondents offer is the same score that “lenders” or “landlords” typically use to determine creditworthiness.

20.

Consumers who click on these advertisements are directed to landing pages, which usually contain additional claims, such as “With a good credit score, you may pay less with lower interest rates on mortgages, auto loans and credit cards.” 21.

Consumers are then directed through a series of enrollment pages where they enter personal information, including their credit card numbers, to obtain the TUCM Product, which includes the VantageScore credit score bundled with a subscription -based credit monitoring service and a credit report. 22.

There is no way for Respondents or a consumer to know which credit score model or particular credit score a lender may rely upon when making a credit decision related to that consumer.

23.

In many cases, there are significant and meaningful differences between the VantageScore credit scores marketed and sold to consumers and the variety of credit scores used by lenders.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 8 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 9 of 32 PageID #:63

Page 65

24.

As a result, the scores marketed and sold to consumers often present an inaccurate picture of how lenders, the vast majority of which use other scores and data providers, assess consumer creditworthiness.

25.

In some instances, the advertisements contain disclosures, but they fail to adequately disclose that the VantageScore credit scores they are selling to consumers are not the scores lenders typically use. 26.

A significant number of the advertisements fail to include on the first web page viewed by consumers any disclosures about the nature of the credit scores it offers. Rather, the first time any disclosure appears is on the landing page, which the consumer accesses by clicking on a link in the initial advertisement. 27.

The disclosure, however, is not clear and conspicuous or easy to understand. Rather, the disclosure, which states “Lenders use many different credit scoring models. The score you get from us may not be the one your lender uses[,]” is typically buried at the bottom of the advertisement in fine print, far removed from the claims the disclosure was intended to modify; or depending on the advertising channel through which the consumers accesses the TUCM Product, does not appear until the first or second step of the order pages. 28.

Section 1036(a)(1)(B) of the CFPA prohibits “unfair, deceptive, or abusive” acts or practices. 12 U.S.C. § 5536(a)(1)(B).

29.

As described in Paragraphs 4 through 27, in connection with the advertising, marketing, promoting, offering for sale, or sale of the TUCM Product, Respondents have represented, directly or indirectly, expressly or impliedly, that the credit scores they market and sell to consumers are the same scores typically used by lenders or other commercial users for credit decisions. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 9 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 10 of 32 PageID #:64

Page 66

30.

In fact, the credit scores Respondents market and sell to consumers are not the same scores typically used by lenders or other commercial users for credit decisions.

31.

Thus, Respondents’ representations, as described in Paragraphs 4 through 27, are false or misleading and constitute deceptive acts or practices in violation of sections 1031(a) and 1036(a)(1)(B) of the CFPA, 12 U.S.C. §§ 5531(a), 5536(a)(1)(B).

Findings and Conclusions as to Misrepresentations Related to the “Free” or “$1” TUCM Product 32.

During the Relevant Period the vast majority of the online advertisements also misrepresented to consumers that they could have access to “free” credit scores and “$1” credit reports.

33.

The advertisements routinely stated: “You’re Seconds Away From Your FREE Credit Score”; “See your FREE credit score”; and “Free Credit Score and $1 Report.”

34.

In fact, these promotions included a Negative Option billing structure: Consumers who signed up for the TUCM Product to obtain their “free” scores and “free” or “$1” reports received a bundled product that included a seven-day free trial of a credit monitoring service. After that seven-day period, consumers who did not cancel their subscription were automatically enrolled in the monthly subscription-based credit monitoring service that usually cost $16.99 per month. TUI charged each consumer this recurring membership fee automatically each month until the consumer cancelled.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 10 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 11 of 32 PageID #:65

Page 67

35.

TUI’s advertisements offering “free” or “$1” TUCM Products failed to adequately disclose the Negative Option feature of the product. 36.

The disclosure in the advertisements was neither clear nor conspicuous. In contrast to the bold, colorful headlines that touted the free scores and products, the disclosure was often displayed in fine print, in low contrast, and was generally placed in a less prominent location, such as the bottom of the webpage, grouped with other disclosures.

37.

In some instances, consumers did not know they had been automatically enrolled in a Negative Option subscription plan for the TUCM Product until they discovered a charge – usually of $16.99 per month – on their bank or credit card statement. 38.

Section 1036(a)(1)(B) of the CFPA prohibits “unfair, deceptive, or abusive” acts or practices. 12 U.S.C. § 5536(a)(1)(B). As described in Paragraphs 32 through 37, in connection with the advertising, marketing, promotion, offering for sale, or sale of the TUCM Product, Respondents have represented, directly or indirectly, expressly or impliedly, that consumers could obtain their credit score or credit report for free or for a $1 fee.

39.

In fact, many consumers do not receive their credit score or credit report for free or for a $1 fee. Instead, Respondents’ offer, which is described in a disclosure that is neither clear nor conspicuous, is a Negative Option whereby consumers enroll in a subscription plan that involves a monthly fee unless they cancel during the trial period. Therefore, Respondents engaged in deceptive acts or practices in violation of sections 1031(a) and 1036(a)(1)(B) of the CFPA, 12 U.S.C. §§ 5531(a), 5536(a)(1)(B).

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 11 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 12 of 32 PageID #:66

Page 68

ORDER V Conduct Provisions IT IS ORDERED, under sections 1053 and 1055 of the CFPA, that: 40.

Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, may not violate sections 1031 and 1036 of the CFPA, 12 U.S.C. §§ 5531 and 5536 as follows, and must take the following affirmative actions: a. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, in connection with the advertising, marketing, promotion, offering for sale, sale, or performance of Credit-Related Products, may not misrepresent, or assist others in misrepresenting, expressly or impliedly: i.

Any material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges; ii.

Any material fact about the timing or manner of any charge or bill, including the frequency or recurrence of any charge or bill, the purpose for which a consumer’s credit card or payment information will be used, the length of subscription, if applicable, the date(s) upon which the consumer will be charged or billed, and the deadline (by date or frequency) by which the consumer must act in order to stop any charges; or 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 12 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 13 of 32 PageID #:67

Page 69

Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 14 of 32 PagelD #:68

i.

2017-CFPB-0002 Document1 Filed 01/03/2017 Page 13 of 31

Any >ther fact material to :onsumers, such asa _ y material restrictions, limitations, or conditions of the prod ict or servize, or any naterial aspect

of its performance, efficacy, nature, or central c aracteristics.

b. Respondents, their officers, age its, servants, employ :es, and attorneys wh »)

have actu u notice of this Conse 1t Order, hether act ng directly or indirectly,

in connec ion with t e advertising, marketing, promotion, offering for sale, sale,

or perfor 1ance of any Credit-Related Pro uct:

1.

Before enrolling any consumer in a Credit-Related Product with a Negative Option feature, Respondents must obtain the ex oress informed conse 1t from the consumer, which consists of:

1. For all Int :rnet offers: a check b x on the final order page that consumers must affir natively c .eck to select the Negative Optio 1 feature (i.e., it cannot be pre-checked), and which clearly and conspicuo tsly states that the co isumer agrees to be b Iled for the product u less the consumer cancels before the trial period expires;

2. Immediately adjacent to the affi mative sel action checkbox, Responde its must clearly and conspicuously disclose: (i) if applicable, the amou it the cons 1mer will be charged »n a recurr ng (e.g., monthly) basis if the product or servi :e is not ca acelled bef sre the expiration of the trial period; and (ii) the date when the trial period expires and the amount t 1e consum=2r will be billed; and

3. The disclosure must not contain any infor :ation related to the

benefits of the produ t.

Page 70

ii.

Within a reasonable time period after the Effective Date as set forth in the Compliance Plan, must provide a simple mechanism for a consumer to immediately cancel the purchase of any Credit-Related Product, and stop billing and collecting payments for any recurring charge for any good or service. The mechanism must not be difficult, costly, confusing, or time consuming, and must, at a minimum, be substantially similar to the mechanism(s) the consumer used to initiate the purchase of any Credit- Related Product;

iii.

For all oral offers for a Credit-Related Product, in addition to disclosing the information identified in Subsections (a)(i)-(iii), and prior to obtaining any billing information from a consumer, obtain affirmative and unambiguous oral confirmation that the consumer: 1.

Consents to authorizing payment for such goods or services; and 2.

Understands the specific steps the consumer must take to prevent further charges.

c. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, in connection with the advertising, marketing, promotion, offering for sale, sale, or performance of Credit-Related Products, including through textual, oral or audible communications, or communications disseminated through audible means or interactive media including, but not limited to, internet advertisement, must take the following actions when offering or providing a VantageScore credit score to consumers:

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 14 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 15 of 32 PageID #:69

Page 71

i.

Clearly and prominently disclose the nature of the credit score offered in each communication containing the offer and, for internet offers, on at least one page of the order process.

ii.

Ensure that the disclosure clearly and prominently discloses or substantially states the following:

1.

Like other credit scores offered to consumers, the credit score Respondent is selling is not likely to be the same score used by lenders or other commercial users for credit decisions; and 2.

There are various types of credit scores, and lenders use a variety of different types of credit scores to make lending decisions; iii.

For written communications, including for internet offers, ensure that the disclosure contains a label in font size double that of the disclosure that says: “What You Need to Know.”

d. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, must take the following actions:

i.

Further develop and implement comprehensive policies and procedures for improving communication with consumers regarding Credit-Related Products, including, but not limited to, communications about the nature of the credit score, pricing structure, , and any other material terms, including:

1.

Regularly collecting, reviewing, and assessing key performance metrics, such as Consumer Complaints (both those it receives directly as well as those it receives through other channels such as the CFPB 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 15 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 16 of 32 PageID #:70

Page 72

and State Attorneys General Offices, among other complaint avenues) and cancellation rates, for evidence of consumer confusion regarding the products and services it offers to consumers; 2.

Regularly collecting, reviewing, and assessing empirical data regarding consumer perceptions of Respondents’ advertising with regard to the nature of the credit score, the pricing structure, the effective cost of the product or service, and any other material terms; and 3.

Regularly reviewing and assessing advertisements to determine what modifications, if any, need to be made to the advertisements to improve consumer understanding of Credit-Related Products in light of empirical evidence.

VI Compliance Plan IT IS FURTHER ORDERED that:

41.

Within 90 days of the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting for review and determination of non-objection a comprehensive compliance plan designed to ensure that Respondents’ advertising practices comply with all applicable Federal consumer financial laws and the terms of this Consent Order (Compliance Plan). The Compliance Plan must include, at a minimum:

a. Detailed steps for addressing each action required by Section V of this Consent Order; and 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 16 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 17 of 32 PageID #:71

Page 73

b. Specific timeframes and deadlines for implementation of the steps described above.

42.

The Assistant Deputy for Consumer Reporting will have the discretion to make a determination of non-objection to the Compliance Plan or direct Respondents to revise it. If the Assistant Deputy for Consumer Reporting directs Respondents to revise the Compliance Plan, the Respondents must make the revisions and resubmit the Compliance Plan to the Assistant Deputy for Consumer Reporting within 30 days.

43.

After receiving notification that the Assistant Deputy for Consumer Reporting has made a determination of non-objection to the Compliance Plan, Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the Compliance Plan.

VII Role of the Board IT IS FURTHER ORDERED that:

44.

The Board, or a duly authorized committee thereof, must review all submissions (including plans, reports, programs, policies, and procedures) required by this Consent Order prior to submission to the Bureau.

45.

Although this Consent Order requires Respondents to submit certain documents for the review or non-objection by the Assistant Deputy for Consumer Reporting, the Board will have the ultimate responsibility for proper and sound management of Respondents and for ensuring that Respondents comply with Federal consumer financial law and this Consent Order.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 17 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 18 of 32 PageID #:72

Page 74

46.

In each instance that this Consent Order requires the Board to ensure adherence to, or perform certain obligations of Respondents, the Board, or a duly authorized committee thereof, must:

a. Authorize whatever actions are necessary for Respondents to fully comply with the Consent Order;

b. Require timely reporting by management to the Board, or a duly authorized committee thereof, on the status of compliance obligations; and c. Require timely and appropriate corrective action to remedy any material noncompliance with any failures to comply with Board directives related to this Section.

VIII Order to Pay Redress IT IS FURTHER ORDERED that:

47.

Within 10 days of the Effective Date, Respondents must reserve or deposit into a segregated deposit account $13,930,000 for the purpose of providing redress to Affected Consumers.

48.

Within 90 days of the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting for review and non-objection a comprehensive written plan for providing redress consistent with this Consent Order (Redress Plan). The Assistant Deputy for Consumer Reporting will have the discretion to make a determination of non-objection to the Redress Plan or direct Respondents to revise it. If the Assistant Deputy for Consumer Reporting directs Respondents to revise the Redress Plan, Respondents must make the revisions and resubmit the Redress Plan to the Assistant Deputy for Consumer Reporting within 30 days. After 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 18 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 19 of 32 PageID #:73

Page 75

receiving notification that the Assistant Deputy for Consumer Reporting has made a determination of non-objection to the Redress Plan, Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the Redress Plan.

49.

The Redress Plan must:

a. Include a detailed description of the methodology used to determine the population of Affected Consumers and the appropriate redress for each Affected Consumer, the manner and form in which redress payments will be distributed to Affected Consumers, and procedures to issue and track redress payments; Provide that Respondent shall pay all costs associated with administering redress and remediation as required by this section; b. Include the form of the letters (“Notification Letters”) and envelopes to be sent notifying consumers of the redress payments and a description of the process for sending the Notification Letters to consumers. Respondent must not include in any envelope containing a Notification Letter any materials other than the approved letter and redress checks.

c. Require Respondent to make reasonable attempts to obtain a current address for any consumer whose Notification Letter is returned for any reason, using at least the National Change of Address System, and to promptly re-mail all returned letters to current addresses. If a redress check for any consumer is returned to Respondent after such second mailing, or if a current mailing address cannot be identified using the National Change of Address System, Respondents must retain the redress amount of such consumer for a period of one hundred and eighty (180) days from the date the check was originally 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 19 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 20 of 32 PageID #:74

Page 76

mailed, during which period such amount may be claimed by such consumer upon appropriate proof of identity.

d. Require Respondents to submit a Redress Plan Report to the Assistant Deputy for Consumer Reporting with 90 days of completion of the Redress Plan. The Redress Plan Report must include an audit and assessment of Respondents’ compliance with the terms of the Redress Plan.

50.

After completing the Redress Plan, if the amount of the redress provided to Affected Consumers is less than $13,930,000 within 30 days of the completion of the Redress Plan, Respondents must pay the Bureau, by wire transfer to the Bureau or to the Bureau’s agent, and according to the Bureau’s wiring instructions, the difference between the amount of redress provided to Affected Consumers and $13,930,000, so that such funds may be distributed to the U.S. Treasury as disgorgement.

51.

Respondents may not condition the provision of any redress to any Affected Consumer under this Order on that Affected Consumer waiving any right. IX Order to Pay Civil Money Penalties IT IS FURTHER ORDERED that:

52.

Under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c), by reason of the violations of law described in Section IV of this Consent Order, and taking into account the factors in 12 U.S.C. § 5565(c)(3), Respondents must pay a civil money penalty of $3,000,000 to the Bureau.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 20 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 21 of 32 PageID #:75

Page 77

53.

Within 10 days of the Effective Date, Respondents must pay the civil money penalty by wire transfer to the Bureau or to the Bureau’s agent in compliance with the Bureau’s wiring instructions.

54.

The civil money penalty paid under this Consent Order will be deposited in the Civil Penalty Fund of the Bureau as required by section 1017(d) of the CFPA, 12 U.S.C. § 5497(d).

55.

Respondents must treat the civil money penalty paid under this Consent Order as a penalty paid to the government for all purposes. Regardless of how the Bureau ultimately uses those funds, Respondents may not: a. Claim, assert, or apply for a tax deduction, tax credit, or any other tax benefit for any civil money penalty paid under this Consent Order; or b. Seek or accept, directly or indirectly, reimbursement or indemnification from any source, including but not limited to payment made under any insurance policy, with regard to any civil money penalty paid under this Consent Order. 56.

To preserve the deterrent effect of the civil money penalty in any Related Consumer Action, Respondents may not argue that Respondents are entitled to, nor may Respondents benefit by, any offset or reduction of any compensatory monetary remedies imposed in the Related Consumer Action because of the civil money penalty paid in this action (Penalty Offset). If the court in any Related Consumer Action grants such a Penalty Offset, Respondents must, within 30 days after entry of a final order granting the Penalty Offset, notify the Bureau, and pay the amount of the Penalty Offset to the U.S. Treasury. Such a payment will not be considered an additional civil money penalty and will not change the amount of the civil money penalty imposed in this action.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 21 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 22 of 32 PageID #:76

Page 78

X Additional Monetary Provisions IT IS FURTHER ORDERED that:

57.

In the event of any default on Respondents obligations to make payment under this Consent Order, interest, computed under 28 U.S.C. § 1961, as amended, will accrue on any outstanding amounts not paid from the date of default to the date of payment, and will immediately become due and payable. 58.

Respondents must relinquish all dominion, control, and title to the funds paid to the fullest extent permitted by law and no part of the funds may be returned to Respondents.

59.

Under 31 U.S.C. § 7701, Respondents, unless they already have done so, must furnish to the Bureau its taxpayer identifying numbers, which may be used for purposes of collecting and reporting on any delinquent amount arising out of this Consent Order.

60.

Within 30 days of the entry of a final judgment, consent order, or settlement in a Related Consumer Action, Respondents must notify the Assistant Deputy for Consumer Reporting of the final judgment, consent order, or settlement in writing. That notification must indicate the amount of redress, if any, that Respondents paid or are required to pay to consumers and describe the consumers or classes of consumers to whom that redress has been or will be paid. XI Reporting Requirements IT IS FURTHER ORDERED that:

61.

Respondents must notify the Bureau of any development that may affect compliance obligations arising under this Consent Order, including but not limited 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 22 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 23 of 32 PageID #:77

Page 79

to, a dissolution, assignment, sale, merger, or other action that would result in the emergence of a successor company; the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Consent Order; the filing of any bankruptcy or insolvency proceeding by or against Respondents; or a change in Respondents name or address. Respondents must provide this notice, if practicable, at least 30 days before the development, but in any case no later than 14 days after the development. 62.

Within 7 days of the Effective Date, Respondents must designate at least one telephone number and email, physical, and postal address as points of contact, which the Bureau may use to communicate with Respondents. 63.

Respondents must report any change in the information required to be submitted under Paragraph 61 at least 30 days before the change or as soon as practicable after the learning about the change, whichever is sooner. 64.

Within 120 days of the Effective Date, and again one year after the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting an accurate written compliance progress report (Compliance Report) that has been approved by the Board or duly authorized committee thereof, which, at a minimum:

a. Describes in detail the manner and form in which Respondents have complied with this Order; and b. Attaches a copy of each Order Acknowledgment obtained under Section XII, unless previously submitted to the Bureau.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 23 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 24 of 32 PageID #:78

Page 80

XII Order Distribution and Acknowledgment IT IS FURTHER ORDERED that:

65. Within 30 days of the Effective Date, Respondents must deliver a copy of this Consent Order to each of their board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who have responsibilities related to the subject matter of the Consent Order.

66.

For five years from the Effective Date, Respondents must deliver a copy of this Consent Order to any business entity resulting from any change in structure referred to in Section XI, any future board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who will have responsibilities related to the subject matter of the Consent Order before they assume their responsibilities. 67.

Respondents must secure a signed and dated statement acknowledging receipt of a copy of this Consent Order, ensuring that any electronic signatures comply with the requirements of the E-Sign Act, 15 U.S.C. § 7001 et seq., within 30 days of delivery, from all persons receiving a copy of this Consent Order under this Section. XIII Recordkeeping IT IS FURTHER ORDERED that:

68.

Respondents must create, or if already created, must retain for at least five years from the Effective Date, the following business records: a. All documents and records necessary to demonstrate full compliance with each provision of this Consent Order, including all submissions to the Bureau. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 24 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 25 of 32 PageID #:79

Page 81

b. All documents and records pertaining to the Redress Plan, described in Section VIII above.

c. Copies of all internet (website), direct email, and print advertisements, sufficient to demonstrate the experience of consumers on each materially different version of each advertisement, including all order flow pages on which Respondents, whether acting directly or indirectly, advertise, promote, market, offer for sale, sell, or provide Credit Related Products, and any other marketing material, including, but not limited to, sales scripts and training materials relating to the Credit-Related Products, including any such materials used by a third party or affiliate on behalf of Respondents; d. For each internet (website), direct email, print advertisement, or other marketing material relating to Credit-Related Products: A record of the date(s) and locations or placements where the advertisement is publicly accessible to the extent that information is available; the number, type, and cost of all Credit- Related Products purchased through the advertisement; and any and all modifications made to the advertisement, including to any disclosure(s) on the advertisement;

e. A record of all consumer perception assessments or testing and all documents created pursuant to the requirements of Section VI; and f.

For each internet (website) advertisement, the number of visits to, unique visitors, impressions of, and clicks on the advertisement and any associated landing and flow page(s), to the extent that information is available; and the number of conversions, purchases of a Credit-Related Product, and consumers acquired through the advertisement.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 25 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 26 of 32 PageID #:80

Page 82

g. For each individual Affected Consumer: the consumer’s name, address, phone number, email address, amount paid, description of the Credit-Related Product purchased, the date on which the Credit-Related Product was purchased, and, if applicable, the date and reason consumer left the program. h. For each Credit-Related Product, accounting records showing the gross and net revenues generated by the Credit-Related Product. i.

All Consumer Complaints and refund requests (whether received directly or indirectly, such as through a third party) relating to any Credit-Related Product, and any responses to those complaints or requests. j.

Respondents must make the documents identified in Paragraph 68 available to the Bureau upon the Bureau’s request.

Respondents will retain telephonic communications with consumers in accordance with its standard document retention policy, as set forth in the Compliance Plan.

XIV Notices IT IS FURTHER ORDERED that:

Unless otherwise directed in writing by the Bureau, Respondents must provide all submissions, requests, communications, or other documents relating to this Consent Order in writing, with the subject line, “In re TransUnion Interactive, Inc.; Trans Union, LLC, and; TransUnion, File No. 201 -CFPB- ,” and send them either:

By overnight courier (not the U.S. Postal Service), as follows: Assistant Deputy for Consumer Reporting Consumer Financial Protection Bureau 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 26 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 27 of 32 PageID #:81

Page 83

230 South Dearborn Street Suite 1590 Chicago, IL 60604 b. By first-class mail to the below address and contemporaneously by email to [email protected]:

Assistant Deputy for Consumer Reporting Consumer Financial Protection Bureau 230 South Dearborn Street Suite 1590 Chicago, IL 60604 XV Cooperation with the Bureau 70.

Respondents must cooperate fully to help the Bureau determine the identity and location of each Affected Consumer. Respondents must provide such information in their or their agents’ possession or control within 30 days of receiving a written request from the Bureau.

XVI Compliance Monitoring IT IS FURTHER ORDERED that, to monitor Respondents’ compliance with this Consent Order:

71.

Within 30 days of receipt of a written request from the Bureau, Respondents must submit additional Compliance Reports or other requested information, which must be made under penalty of perjury; provide sworn testimony; or produce documents.

72.

Respondents must permit Bureau representatives to interview any employee or other person affiliated with Respondents who has agreed to such an interview. The person interviewed may have counsel present.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 27 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 28 of 32 PageID #:82

Page 84

73.

Nothing in this Consent Order will limit the Bureau’s lawful use of civil investigative demands under 12 C.F.R. § 1080.6 or other compulsory process. XVII Modifications to Non-Material Requirements IT IS FURTHER ORDERED that:

74.

Respondents may seek a modification to non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) by submitting a written request to the Assistant Deputy for Consumer Reporting.

75.

The Assistant Deputy for Consumer Reporting may, in his/her discretion, modify any non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) if he/she determines good cause justifies the modification. Any such modification by the Assistant Deputy for Consumer Reporting must be in writing.

XVIII Administrative Provisions 76.

The provisions of this Consent Order do not bar, estop, or otherwise prevent the Bureau, or any other governmental agency, from taking any other action against Respondents, except as described in Paragraph 77. 77.

The Bureau releases and discharges Respondents from all potential liability for law violations that the Bureau has or might have asserted based on the practices described in Section IV of this Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. The Bureau may use the practices described in this Consent Order in future 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 28 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 29 of 32 PageID #:83

Page 85

enforcement actions against Respondents and their affiliates, including, without limitation, to establish a pattern or practice of violations or the continuation of a pattern or practice of violations or to calculate the amount of any penalty. This release does not preclude or affect any right of the Bureau to determine and ensure compliance with the Consent Order, or to seek penalties for any violations of the Consent Order.

78.

This Consent Order is intended to be, and will be construed as, a final Consent Order issued under section 1053 of the CFPA, 12 U.S.C. § 5563, and expressly does not form, and may not be construed to form, a contract binding the Bureau or the United States.

79.

This Consent Order will terminate five years from the Effective Date or five years from the most recent date that the Bureau initiates an action alleging any violation of the Consent Order by Respondents. If such action is dismissed or the relevant adjudicative body rules that Respondents did not violate any provision of the Consent Order, and the dismissal or ruling is either not appealed or upheld on appeal, then the Consent Order will terminate as though the action had never been filed. The Consent Order will remain effective and enforceable until such time, except to the extent that any provisions of this Consent Order have been amended, suspended, waived, or terminated in writing by the Bureau or its designated agent. 80. Calculation of time limitations will run from the Effective Date and be based on calendar days, unless otherwise noted.

81.

Should Respondents seek to transfer or assign all or part of its operations that are subject to this Consent Order, Respondents must, as a condition of sale, obtain the 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 29 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 30 of 32 PageID #:84

Page 86

written agreement of the transferee or assignee to comply with all applicable provisions of this Consent Order.

82.

The provisions of this Consent Order will be enforceable by the Bureau. For any violation of this Consent Order, the Bureau may impose the maximum amount of civil money penalties allowed under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c). In connection with any attempt by the Bureau to enforce this Consent Order in federal district court, the Bureau may serve Respondents wherever Respondents may be found and Respondents may not contest that court’s personal jurisdiction over Respondents.

83.

This Consent Order and the accompanying Stipulation contain the complete agreement between the parties. The parties have made no promises, representations, or warranties other than what is contained in this Consent Order and the accompanying Stipulation. This Consent Order and the accompanying Stipulation supersede any prior oral or written communications, discussions, or understandings.

84.

When a consumer is offered or provided a Credit-Related Product pursuant to the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681g or a state law regarding credit file security freezes, Respondents will follow any applicable requirements mandated by those laws in lieu of the requirements of Sections V and Section XIII of this Consent Order.

85.

Nothing in this Consent Order or the accompanying Stipulation may be construed as allowing Respondents, their Boards, officers, or employees to violate any law, rule, or regulation.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 30 of 31 Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 31 of 32 PageID #:85

Page 87

Case: 1:22-cv-01880 Document #: 1-1 Filed: 04/12/22 Page 32 of 32 PagelD #:86 2017-CFPB-0002 Document1 Filed 01/03/2017 Page 31 of 31

IT IS SO ORDERED, this 3 ch day of January, 2017.

Feokud) Chew

Richard Cordray Director Consumer Financial Protection Bureau

a1

Page 88

APPENDIX B Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 1 of 6 PageID #:87

Page 89

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU File No. 201 CFPB- STIPULATION AND CONSENT TO THE ISSUANCE OF A CONSENT ORDER In the matter of:

TransUnion Interactive, Inc., TransUnion, LLC, and TransUnion The Consumer Financial Protection Bureau (Bureau) intends to initiate an administrative proceeding against TransUnion Interactive, Inc. (TUI), TransUnion, LLC (TULLC), and TransUnion (collectively, Respondents), under 12 U.S.C. §§ 5563 and 5565, for their deceptive and misleading advertisements for Credit-Related Products in violation of the Consumer Financial Protection Act’s (CFPA) prohibition on unfair, deceptive, or abusive acts or practices, 12 U.S.C. §§ 5531, 5536. Respondents, in the interest of compliance and resolution of the matter, and without admitting or denying any wrongdoing, consent to the issuance of a Consent Order substantially in the form of the one to which this Stipulation and Consent to the Issuance of a Consent Order is attached (Consent Order), and which is incorporated by reference.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 1 of 5 Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 2 of 6 PageID #:88

Page 90

In consideration of the above premises, Respondents agree to the following: Jurisdiction 1.

The Bureau has jurisdiction over this matter under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563, 5565.

Consent 2.

Respondents agree to the issuance of the Consent Order, without admitting or denying any of the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over Respondents and the subject matter of this action.

3.

Respondents agree that the Consent Order will be deemed an “order issued with the consent of the person concerned” under 12 U.S.C. § 5563(b)(4), and agrees that the Order will become a final order, effective upon issuance, and will be fully enforceable by the Bureau under 12 U.S.C. §§ 5563(d)(1) and 5565. 4.

Respondents voluntarily enter into this Stipulation and Consent to the Issuance of a Consent Order.

5.

The Consent Order resolves only Respondents’ potential liability for law violations that the Bureau asserted or might have asserted based on the practices described in Section IV of the Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. Respondents acknowledge that no promise or representation has been made by the Bureau or any employee, agent, or representative of the Bureau, about any liability outside of this action that may have arisen or may arise from the facts underlying this action or immunity from any such liability.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 2 of 5 Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 3 of 6 PageID #:89

Page 91

6.

Respondents agree that the facts described in Section IV of the Consent Order will be taken as true and be given collateral estoppel effect, without further proof, in any proceeding before the Bureau to enforce the Consent Order, or in any subsequent civil litigation by the Bureau to enforce the Consent Order or its rights to any payment or monetary judgment under the Consent Order. 7.

The terms and provisions of this Stipulation and the Consent Order will be binding upon, and inure to the benefit of, the parties hereto and their successors in interest. 8.

Respondents agree that the Bureau may present the Consent Order to the Bureau Director for signature and entry without further notice. Waivers 9.

Respondents, by consenting to this Stipulation, waives: a. Any right to service of the Consent Order, and agree that issuance of the Consent Order will constitute notice to the Respondents of its terms and conditions;

b. Any objection to the jurisdiction of the Bureau, including, without limitation, under section 1053 of the CFPA, 12 U.S.C. § 5563; c. The rights to all hearings under the statutory provisions under which the proceeding is to be or has been instituted; the filing of proposed findings of fact and conclusions of law; proceedings before, and a recommended decision by, a hearing officer; all post-hearing procedures; and any other procedural right available under section 1053 of the CFPA, 12 U.S.C. § 5563, or 12 CFR Part 1081;

d. The right to seek any administrative or judicial review of the Consent Order; 2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 3 of 5 Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 4 of 6 PageID #:90

Page 92

e. Any claim for fees, costs or expenses against the Bureau, or any of its agents or employees, and any other governmental entity, related in any way to this enforcement matter or the Consent Order, whether arising under common law or under the terms of any statute, including, but not limited to the Equal Access to Justice Act and the Small Business Regulatory Enforcement Fairness Act of 1996; for these purposes, Respondents agree that Respondents are not the prevailing parties in this action because the parties have reached a good faith settlement;

f.

Any other right to challenge or contest the validity of the Consent Order; g. Such provisions of the Bureau’s rules or other requirements of law as may be construed to prevent any Bureau employee from participating in the preparation of, or advising the Director as to, any order, opinion, finding of fact, or conclusion of law to be entered in connection with this Stipulation or the Consent Order; and h. Any right to claim bias or prejudgment by the Director based on the consideration of or discussions concerning settlement of all or any part of the proceeding.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 4 of 5 Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 5 of 6 PageID #:91

Page 93

Case: 1:22-cv-01880 Document #: 1-2 Filed: 04/12/22 Page 6 of 6 PagelD #:92 2017-CFPB-0002 Document2_ Filed 01/03/2017 Page5of5

TransUnion Interactive, Inc.;

Trans Union, LLC, and;

TransUnion

| h \2/22/ |b si Blenke Date Executive Vice President The undersigned director of TransUnion acknowledges having read this Stipulation and the Consent Order, and a, ¢ / entering into this Stipulation. (2 [22/\b

J aan Date Directef, President and Chief Executive Officer, TransUnion

Page 94

APPENDIX C Case: 1:22-cv-01880 Document #: 1-3 Filed: 04/12/22 Page 1 of 4 PageID #:93

Page 95

Appendix C, Screen 1 Case: 1:22-cv-01880 Document #: 1-3 Filed: 04/12/22 Page 2 of 4 PageID #:94

Page 96

Appendix C, Screen 2

Case: 1:22-cv-01880 Document #: 1-3 Filed: 04/12/22 Page 3 of 4 PageID #:95

Page 97

Case: 1:22-cv-01880 Document #: 1-3 Filed:

Appendix C, Screen 3

$2) . pm TransUnion

Be in the know with TransUnion® - see your credit score NOW

Step L Step 2 Tell us about yourself &:} Create your account

Do

For your protection, we need to make sure you are really identified

Which of these cities are you associated with?

None of the above

From the following list. select the city in which you lived

None of the above

Which of the following hunting or fishing licenses do you have or have you had in the past?

© None of the above

VERIFY MY IDENTITY S)

Signup Memberlogin Aboutus Support TermsofUse Privacy

This site is hosted end operated by TransUnion Consumer Interactive, Inc., « wholly owned subsidiery of TrancUnion

fi

copyright 2017 TransUnion Gonsumer Interactive All Rights Reserved

04/12/22 Page 4 of 4 PagelD #:96

ce) Support 4 Login

TransUnion Secure Server

Step3 Sy Verify your identity

v/s

abl a Su) = Questions? —<

my

Is the Identity Verification ctep essential to registration?

Can I leave the cite before | em finished?

Page 98

APPENDIX D Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 1 of 10 PageID #:97

Page 99

Appendix D.1, Screen 1

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 2 of 10 PageID #:98

Page 100

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 3 of 10 PagelD #:99

Appendix D.1, Screen2

’

|GO|FreeCredit.com TransUnion

a s i .

zexperian. EQuIFAx

Did you know?

Verify Verify your identity In order to verify your identity, please answer the following security questions

In Hou applied for a hunting or fishing license in which of the following states?

None of the Above

Which of these street names are you associated with?

Offer Details

score & $1 Credit ort are available as part of a 7-day trial of ption-based credit monitoring

Your free TransUnion credit

You may cancel at any time during the riod. At the end of your 7 be billed t of only In iiwhat county did you live in? (plus tax where applicable)

None of the Above trial, you will

95 per month

VantageScore 3.0

| There are various types o 7 anes scores

score you receive is based on the Vs

3.0 model and may nol be the credit score

model used by your lender.

None of the Above

_ ’ i Featured On:

yahoo! ¥ msn

fee) Bankingr MarketWatch

GO|FreeCredit.com

yistere

ransUnion Interactiv

fe define children as ir

Page 101

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 4 of 10 PagelD #:100

Appendix D.1, Screen3

GO|FreeCredit.com

View

ee ee

Time remaining to complete transaction: 4:50

Last step

Let's get

rd Report

x account set up to see

Account Information:

Username @

Security Question

Security Answer @®

Choose a security question. v

Name On Ca Card Number

Expiration Date CW @ Month v Year we

s your home address the same as your billing oO Yes Nc

address?

Jing “written instructions

n iniorme

sUnion Interactive toc

@ s. .

TransUnion fexperian. EQUIFAX

Did you know?

You should be monitoring your credit.

Protect yourself with credit monitoring to make sure your Credit Report end Score are on track. You'll get alerts if changes are made to your account so you

can teke actior

Credit Score & More

Score & Report

Y Upto$1 Million ID Theft insurance

/ Personalized Debt An:

Y Credit Compass VY Toll-Free 1D Theft Specialist

VY EmailUpdates and Alerts

Featured On:

yahoo!

¥Y msn

MarketWatch

Page 102

Appendix D.2 Screen 1, Part 1 (Upper Half) Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 5 of 10 PageID #:101

Page 103

Appendix D.2, Screen 1, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 6 of 10 PageID #:102

Page 104

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 7 of 10 PagelD #:103

Appendix D.2, Screen 2, Part 1 (Upper Half)

EQUIFAX”

e® 2) ° TransUnion Powered ty Credtcom

Next Steps for your Auto Loan:

Make Sure You Know Your Credit Score

@® Verify

Verify your identity

In order to verify your identity, please answer the following security questions:

Which of these last names have you used previously?

None of the Above

Which of the following people lives or owns property in Massachusetts?

None of the Above

Which of these phone numbers have you ever used previously?

None of the Above

Offer Details: VantageScore 3.0

Your free TransUnion credit score & $1 Credit Report are available as part There are various types of cedit scores, and lenders use a variety of

of a ?-cay trial of our subscription-based credit monitoring service. You different types of credit scores to make lending decisions. The credit score may cancel at any time during the trial period. At the end of your 7-day trial, you receive is based on the VantageScore 3.0 model and may not be the you wil be billed at a low cost of only $24.95 per month (alus tax where credit score model used by your lender

applicable)

Page 105

Appendix D.2, Screen 2, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 8 of 10 PageID #:104

Page 106

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 9 of 10 PagelD #:105

Appendix D.2, Screen 3, Part 1 (Upper Half)

myAutoloan: TransUnion” "Experian EQUIFAX’

Powered by GOFreeCredit.com

Next Steps for your Auto Loan:

Make Sure You Know Your Credit Score

Account Information @

username

Paseword

Must be between 8-15 characters long, contain letters, numbers, and is case sensitive

Security Questions @

Security question

Choose a security question_ =

Security answer U.S, Issued Credit or Debit Card ©

Name on card

Card number

Expiration date (MM/YY) Security code Is your home address the same as your billing address? Oo Yes No & =

You are agreeing to the service agreement and providing “written instructions’ to TransUnion Interactive, Inc. to

obtain information from your personal credit profile trom Experian, Equifax and/or TransUnion. You authorize TransUnion Interactive, inc. to obtain such information solely to confirm your identity and display your credit data to you

Page 107

Appendix D.2, Screen 3, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 1-4 Filed: 04/12/22 Page 10 of 10 PageID #:106

Amended complaint ()

PDF of this document (107 pages)

Page 108

IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF ILLINOIS EASTERN DIVISION

Consumer Financial Protection Bureau,

Plaintiff,

v.

TransUnion, Trans Union LLC, TransUnion Interactive, Inc., and John T. Danaher,

Defendants.

Case No. 1:22-cv-1880

FIRST AMENDED COMPLAINT The Consumer Financial Protection Bureau (Bureau) brings this action against TransUnion, Trans Union LLC, and TransUnion Interactive, Inc., (collectively, Corporate Defendants), and John T. Danaher (Danaher) under the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5531, 5536(a), 5564, 5565, the Electronic Fund Transfer Act (EFTA), 15 U.S.C. § 1693e(a), and its implementing regulation, Regulation E, 12 C.F.R. § 1005.10(b), and the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681j(a), and its implementing regulation, Regulation V, 12 C.F.R. § 1022.136.

INTRODUCTION 1.

In 2017, the Bureau found that Corporate Defendants had engaged in deceptive acts and practices in violation of the CFPA in connection with their marketing and sale of credit scores, credit reports, and credit-monitoring products to consumers. The Bureau agreed to resolve those findings without litigation through a consent order (the Order, which is Appendix A to this Complaint) that required Corporate Defendants to pay restitution and a civil penalty, and to abide by certain conduct provisions. Corporate Defendants’ stipulation to the entry of the Order is Appendix B to this Complaint.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 1 of 55 PageID #:878

Page 109

2.

Corporate Defendants have violated the Order since the day it went into effect. Corporate Defendants failed to implement the Order’s core requirements, including (i) ensuring that consumers were not misled about the nature and terms of their credit-monitoring product; (ii) adding a checkbox to their trial offer subscription products to ensure consumers consented to enrolling in such products; and (iii) providing a way for consumers to immediately and easily cancel their subscriptions and obtain refunds instead of facing roadblocks. 3.

Not only did Corporate Defendants violate the Order and continue engaging in the same deceptive acts that necessitated it, but they also engaged in numerous other misleading tactics to cause consumers to enroll in their subscription products and prevent them from cancelling.

4.

Further, Corporate Defendants engaged in additional violations of Federal consumer financial laws; they failed to properly obtain consumers’ authorization to make recurring withdrawals from their bank accounts—violating EFTA and Regulation E—and included misleading advertisements on annualcreditreport.com that diverted consumers seeking their free annual credit report to an indefinite paid subscription for credit monitoring. 5.

John T. Danaher, the long-time and now former President of TUI, also violated the Order. Danaher had the authority and obligation to ensure Corporate Defendants complied with the Order, but failed to do so. Instead, he allowed Corporate Defendants to defy the law and continue engaging in misleading marketing, even in the face of thousands of consumer complaints and refund requests.

6.

The Bureau files this Complaint to stop the Defendants’ unlawful practices that have harmed consumers.

JURISDICTION AND VENUE 7.

This Court has subject-matter jurisdiction over this action because it is brought under “Federal consumer financial law,” 12 U.S.C. § 5565(a)(1), presents a federal question, 28 U.S.C. § 1331, and is brought by an agency of the United States, 28 U.S.C. § 1345. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 2 of 55 PageID #:879

Page 110

8.

Venue is proper because Defendants are located, reside, or do business in this district. 12 U.S.C. § 5564(f).

PARTIES 9.

The Bureau is an independent agency of the United States created by the CFPA. 12 U.S.C. § 5491(a). The Bureau has independent litigating authority and may initiate civil actions in federal district court to secure appropriate relief for violations of “Federal consumer financial law,” 12 U.S.C. § 5564(a)-(b), including the CFPA, EFTA, Regulation E, FCRA, and Regulation V, 12 C.F.R. part 1022. 12 U.S.C. §§ 5481(12)(C), (F), (14); 15 U.S.C. § 1693o. 10.

TransUnion Interactive, Inc. (TUI) is a Delaware corporation located in Chicago, Illinois that generates, markets, and sells Credit-Related Products. Credit-Related Products are defined by the Order as “any product or service [Corporate Defendants] offer for sale directly to consumers, including but not limited to the [TU Credit Monitoring] Product, credit scores, credit reports, credit monitoring, or identity theft insurance or protection.” 11.

At all times relevant to this Complaint, directly and indirectly, including through marketing affiliates, through a common enterprise with the other Corporate Defendants, and as an agent acting with actual or apparent authority for the other Corporate Defendants, TUI has offered or provided a “consumer financial product or service” and is therefore a “covered person” under the CFPA. 12 U.S.C. §§ 5481(5), (6), (15)(A)(ix). TUI is a wholly-owned subsidiary of Trans Union LLC (TULLC).

12.

TULLC is a Delaware limited liability company located in Chicago, Illinois. At all times relevant to this Complaint, TULLC has been a “nationwide consumer reporting agency” (NCRA). 15 U.S.C. § 1681a(p); 12 C.F.R. § 1022.130(h). TULLC compiles and maintains financial, consumer, and commercial data from across the nation and worldwide. TULLC uses credit information it has collected in consumer credit files to generate consumer reports, including credit reports, and makes such information available to TUI for its use in marketing Credit- Related Products to consumers. TULLC markets, sells, and provides consumer reports to Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 3 of 55 PageID #:880

Page 111

commercial users, such as lenders, insurance companies, and potential employers. At all times relevant to this Complaint, directly, indirectly through its agent and affiliate, TUI, and through a common enterprise with the other Corporate Defendants, and acting as an agent with actual or apparent authority for the other Corporate Defendants, TULLC has offered or provided a “consumer financial product or service.” 12 U.S.C. §§ 5481(5), (15)(A)(ix). TULLC has also provided various services to TUI, including compliance and legal services. TULLC is therefore a “covered person” under the CFPA. 12 U.S.C. § 5481(6).

13.

TransUnion is a publicly traded company that is incorporated in Delaware and located in Chicago, Illinois. TransUnion is the ultimate parent company of TUI and TULLC. For 2021, TransUnion publicly reported annual revenue of nearly $3 billion, approximately 18% of which came from TUI. At all times relevant to this Complaint, TransUnion has provided enterprise services to TULLC and TUI, including overall governance and financial support, and therefore is a “covered person” under 12 U.S.C. § 5481(6)(B). TransUnion has also been the “controlling shareholder” of TUI and TULLC at all times relevant to this Complaint. Thus, TransUnion is also a “related person” and, therefore, is deemed a “covered person” on this basis as well. 12 U.S.C. §§ 5481(25)(B), (C)(i).

14.

John T. Danaher was the President of TUI from 2004 until April 1, 2021. From April 2, 2021 until February 1, 2022, he was Executive Vice President for TUI. From 2004 until at least February 1, 2022, Danaher materially participated in the conduct of TUI’s affairs and, consequently, he was a “related person,” and therefore a covered person, under the CFPA. 12 U.S.C. § 5481(25)(B), (C)(i)-(ii).

15.

At all times relevant to this Complaint, TransUnion, TULLC and TUI have operated as a common enterprise (the TU Common Enterprise). They have conducted business through interconnected companies that operate under common control, share offices, and share advertising and marketing. TransUnion and TULLC have maintained officers and directors in common. In public SEC filings, TransUnion holds itself out to the public as an NCRA – even Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 4 of 55 PageID #:881

Page 112

though it is not itself an NCRA –by touting its fifty-year operating history as a leading provider of credit reports that has acquired and developed proprietary databases used to generate consumer reports and other “solutions” for its customers, including consumers. TransUnion’s Board of Directors (the TransUnion Board) governs and oversees the entire enterprise, including TULLC and TUI. Among other things, through its Audit and Compliance Committee, the TransUnion Board oversees the Legal and Compliance Departments for the TransUnion enterprise, including TUI and TULLC. Directly and through its agents and affiliates, TUI and TULLC, and through a common enterprise with those other Corporate Defendants, TransUnion has offered or provided a “consumer financial product or service” at all times relevant to this Complaint. 12 U.S.C. §§ 5481(5), (6), (15)(A)(ix).

FACTUAL BACKGROUND Corporate Defendants’ Sale of Credit-Related Products to Consumers 16.

Corporate Defendants, through TUI, market and sell Credit-Related Products to consumers. These products include the TransUnion Credit Monitoring Product (TU Credit Monitoring), which is a bundled Credit-Related Product offered by TUI that is sold as a paid monthly subscription. It includes access to a credit score, credit report, credit monitoring, and a product called “Credit Lock” which enables the consumer to lock and unlock his or her TransUnion and Equifax credit reports.

17.

Through Corporate Defendants’ direct-to-consumer, or “direct,” marketing channel, Corporate Defendants provide consumers directly with credit scores, credit monitoring, credit reports, and other Credit-Related Products.

18.

Corporate Defendants have marketed and sold Credit-Related Products to consumers through a variety of online channels. This includes banner and display advertisements that appear on Corporate Defendants’ main website (transunion.com) and on popular websites such as auto.com, bankrate.com, and Amazon; direct emails to certain consumers; search Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 5 of 55 PageID #:882

Page 113

engines; social media; and advertisements on websites operated by Corporate Defendants’ marketing affiliates, including ConsumerTrack, Inc. (ConsumerTrack). 19.

Corporate Defendants have also marketed Credit-Related Products through annualcreditreport.com, which is the website through which consumers can obtain their free annual credit report from Corporate Defendants and the other NCRAs. 20.

At all times relevant to this Complaint, certain marketing affiliates (Affiliates), such as ConsumerTrack, offered Credit-Related Products directly to consumers on Corporate Defendants’ behalf and at Corporate Defendants’ direction, and are regarded by Corporate Defendants as part of their direct marketing channel. Corporate Defendants review and approve all marketing materials and disclosures, including enrollment forms and processes, used by Affiliates.

21.

After consumers click on Corporate Defendants’ advertisements and/or landing pages for Credit-Related Products, they are taken to an enrollment form. An example of Corporate Defendants’ TU Credit Monitoring enrollment form and identity verification questions on transunion.com (Homepage Enrollment Form) is attached as Appendix C. Corporate Defendants used that version of the Homepage Enrollment Form from June 2019 through May 2020 and have used substantially similar versions of the form at all other times relevant to this Complaint. Examples of Corporate Defendants’ TU Credit Monitoring enrollment forms used by Affiliates (Affiliate Enrollment Forms) are attached as Appendix D. ConsumerTrack, on behalf of Corporate Defendants, used Affiliate Enrollment Form D.1 on or about November 21, 2020 and Affiliate Form D.2 on or about March 30, 2021 and, upon information and belief, has used substantially similar versions of the form from March 2017 through the date of this Complaint. 22.

After a consumer completes an enrollment form for TU Credit Monitoring, Corporate Defendants, acting directly or indirectly, or through an agent, enroll the consumer into the product, grant the consumer access to the TU Credit Monitoring online dashboard on transunion.com, charge the consumer’s credit or debit card ($1 for trial offers or the full face value Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 6 of 55 PageID #:883

Page 114

for full price offers), and send an email to the consumer that confirms the consumer’s enrollment into TU Credit Monitoring. Consumers remain enrolled in TU Credit Monitoring and are charged by Corporate Defendants for each month of enrollment (the price varies depending on the offer and channel but is typically $9.99 to $24.99 each month) until consumers affirmatively cancel the subscription, either by calling Corporate Defendants’ customer service line or by using Corporate Defendants’ online cancellation portal on transunion.com.

The Order 23.

On January 3, 2017, the Bureau issued the Order under the caption In re TransUnion Interactive, Inc., et al., No. 2017-CFPB-0002 (Jan. 3, 2017) (Appendix A), as extended on December 22, 2021 and April 1, 2022. The Order was, by its terms, effective on the date of its issuance, January 3, 2017 (the Effective Date). In the Order, the Bureau found that Corporate Defendants violated the CFPA between July 21, 2011 through January 3, 2017 by deceptively marketing Credit-Related Products in two ways. First, Corporate Defendants falsely represented that the credit scores they marketed and sold to consumers were the same scores lenders typically use to determine creditworthiness, when, in reality, the scores used to determine creditworthiness by lenders and other commercial users were highly unlikely to be the scores sold to consumers by Corporate Defendants. Second, Corporate Defendants falsely represented that the scores and reports were “free” or “$1,” when, in reality, a consumer who signed up for a “free” or “$1” trial was automatically enrolled in a subscription program with a recurring monthly fee. 24.

The Order required Corporate Defendants to pay $13.93 million in restitution to consumers and a $3 million civil penalty.

25.

The Order also imposed conduct provisions, including certain provisions specifically designed to protect consumers from continued wrongful conduct by Corporate Defendants. Order, ¶ 40.

26.

The conduct provisions in Paragraph 40 of the Order apply to Corporate Defendants, as well as “their officers, agents, servants, employees, and attorneys who have actual Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 7 of 55 PageID #:884

Page 115

notice of this Consent Order, whether acting directly or indirectly….” The provisions prohibit them from making certain misrepresentations in connection with the marketing and sale of Credit-Related Products; require them to obtain the express informed consent of consumers before enrolling them into Credit-Related Products with a negative option feature; require them to simplify the cancellation process for Credit-Related Products and enable consumers to immediately cancel the purchase of those products; require them to provide certain disclosures to consumers in connection with selling credit scores; and require them to collect, review, and assess consumer-related information and data and to modify their advertising accordingly. The distribution and acknowledgment provisions in Paragraph 65–67 of the Order require Corporate Defendants to distribute the Order to certain persons and obtain acknowledgments of receipt. The recordkeeping provisions in Paragraph 68 of the Order require Corporate Defendants to maintain certain records.

27.

The entire Order is binding on all three Corporate Defendants. The Order also provides that the TransUnion Board “will have the ultimate responsibility for proper and sound management of [Corporate Defendants] and for ensuring that [Corporate Defendants] comply with Federal consumer financial law and this Consent Order.” Order, ¶ 45. 28.

Through the signatures of TransUnion’s then-director, president and chief executive officer and its then-executive vice president and general counsel, Corporate Defendants stipulated to the entry of the Order on December 22, 2016. (Appendix B). Among other things, Corporate Defendants “admit[ted] the facts necessary to establish the Bureau’s jurisdiction over [Corporate Defendants] and the subject matter of this action.” Corporate Defendants further agreed in the stipulation that: (a) “the Consent Order will be deemed an ‘order issued with the consent of the person concerned’ under 12 U.S.C. § 5563(b)(4)”; (b) “the Order will become a final order, effective upon issuance, and will be fully enforceable by the Bureau under 12 U.S.C. §§ 5563(d)(1) and 5565”; and (c) “the facts described in Section IV of the Consent Order [the Bureau’s Findings and Conclusions] will be taken as true and be given collateral estoppel effect, without Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 8 of 55 PageID #:885

Page 116

further proof, in any proceeding before the Bureau to enforce the Consent Order, or in any subsequent civil litigation by the Bureau to enforce the Consent Order or its rights to any payment or monetary judgment under the Consent Order.”

29.

In October 2018, the Bureau commenced an examination of Corporate Defendants (the 2018 Examination) and requested information from Corporate Defendants about their compliance with the Order. In May 2019, Bureau examiners informed Corporate Defendants that they were violating several requirements of the Order. 30.

In June 2020, following an investigation, the Bureau’s Office of Enforcement informed Corporate Defendants that they continued to violate the Order requirements identified during the 2018 Examination and were also violating additional Order requirements and Federal consumer financial laws.

31.

In June 2021, the Bureau’s Office of Enforcement informed Corporate Defendants that they remained in non-compliance with the Order requirements identified in May 2019 and June 2020 and that Corporate Defendants were also violating several additional Order requirements and Federal consumer financial laws. The Bureau’s Office of Enforcement also informed Danaher that he was violating the Order.

Corporate Defendants Violated the Order, EFTA and Regulation E, and Engaged in Deceptive Practices, in Connection with the Marketing and Sale of Credit-Related Products Corporate Defendants’ misrepresentations regarding the nature of TU Credit Monitoring 32.

Paragraph 40(a)(iii) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, in connection with the advertising or marketing of a Credit-Related Product, any material fact about “any . . . conditions of the product or service, or any material aspect of its performance . . . nature, or central characteristics.” 33.

The conditions, nature, and central characteristics of the TU Credit Monitoring product are that it is an ongoing monthly subscription for credit-monitoring services that includes Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 9 of 55 PageID #:886

Page 117

access to a credit score, credit report, and a “Credit Lock” option that blocks new application inquiries on a consumer’s credit file. After a consumer is enrolled into TU Credit Monitoring, Corporate Defendants charge each consumer a recurring membership fee automatically and indefinitely each month until the consumer cancels.

34.

Though TU Credit Monitoring gives consumers access to a credit score, it is not a one-time transaction for a score or a report, and a consumer’s access to a score is conditioned on enrollment in a subscription.

35.

Although TU Credit Monitoring does not offer consumers access to a standalone credit score or report without a subscription, after the Order’s Effective Date and through the present, Corporate Defendants have advertised TU Credit Monitoring on Corporate Defendants’ website and in other locations using prominent and brightly-colored buttons that Corporate Defendants refer to as “Call to Action” buttons. The buttons say, for example, “GET YOUR SCORE,” “TAKE ME TO MY CREDIT SCORE,” and “YES, SHOW ME MY CREDIT NOW.” Any mention of credit monitoring in these advertisements is generally less prominent than the “credit” or “credit score” language.

36.

Figure 1, below, is an example of a “Call to Action” button that Corporate Defendants placed on transunion.com:

Figure 1 37.

On Corporate Defendants’ website, between the Effective Date and the present, there has frequently been a “Call to Action” button similar to the one in Figure 1 on the upper right corner of the homepage, without any accompanying reference to credit monitoring, a price, or a subscription.

38.

These advertisements and others that focus on “scores” or “credit” are likely to mislead consumers acting reasonably under the circumstances because they give consumers the Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 10 of 55 PageID #:887

Page 118

impression that clicking on the advertisement will allow consumers to “get” or “see” a standalone credit score.

39.

But in reality, when a consumer clicks on the “GET YOUR CREDIT SCORE” button and other similar “Call to Action” buttons used by Corporate Defendants, the consumer is not given the opportunity to receive a standalone credit score. Rather, the consumer is taken to an enrollment process for TU Credit Monitoring.

40.

As discussed below, in Paragraphs 78–91, the Homepage Enrollment Form that Corporate Defendants use in connection with these advertisements is also misleading, giving consumers the impression that they are not purchasing anything, but instead providing credit card information for identity verification purposes.

41.

Corporate Defendants use advertisements that refer prominently to “credit scores” instead of “credit monitoring” to increase consumer enrollments. 42.

Corporate Defendants’ misrepresentations about the conditions, nature, and central characteristics of TU Credit Monitoring are material to consumers. Since the Effective Date, Corporate Defendants have received many complaints and refund demands from consumers who intended to obtain only their credit scores or reports, including consumers who had come to the website for the purpose of completing tasks such as disputing something on their credit reports or managing security freezes on their credit reports, and did not understand how they came to be enrolled in an indefinite paid monthly subscription. 43.

In addition, and as described in further detail in Paragraphs 124–137 below, Corporate Defendants used similar “score” representations to advertise the TU Credit Monitoring product on web pages related to consumers’ free annual file disclosure. Corporate Defendants have received many complaints and refund demands from consumers who thought they were accessing their “score” as part of their free annual file disclosure and were confused about how they came to be enrolled in the paid TU Credit Monitoring subscription product. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 11 of 55 PageID #:888

Page 119

44.

Corporate Defendants have therefore violated Paragraph 40(a)(iii) of the Order by misrepresenting the conditions of TU Credit Monitoring and material aspects of its conditions, nature, and central characteristics. This conduct was also deceptive. Corporate Defendants’ misrepresentations about consumers’ enrollment status 45.

As set forth in Paragraph 32, above, Paragraph 40(a)(iii) of the Order prohibits Corporate Defendants and their officers, whether acting directly or indirectly, from making express or implied misrepresentations regarding the conditions of a Credit-Related Product. 46.

In addition, Paragraph 40(a)(i) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, “[a]ny material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges[.]”

47.

Corporate Defendants engage in email marketing campaigns, sending emails to specified groups of consumers to market Credit-Related Products. 48.

The marketing emails generally include images and text, including prominent “Call to Action” buttons of the type used by Corporate Defendants in other advertising channels. 49.

Since the Order’s Effective Date, including beginning on or about December 1, 2019 and February 20, 2020, Corporate Defendants have sent marketing emails to consumers who were not already enrolled in TU Credit Monitoring suggesting those consumers already have access to TU Credit Monitoring or are otherwise eligible to obtain a credit score or report directly from Corporate Defendants without incurring an additional cost. 50.

For example, Corporate Defendants sent over 500,000 emails with the subject line, “You’re in!” The body of the email, as shown in Figure 2, said, in prominent type, “Thank you for signing up!” and contained a prominent orange “Call to Action” button that said, “YES, Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 12 of 55 PageID #:889

Page 120

SHOW ME MY CREDIT NOW.”

Figure 2 Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 13 of 55 PageID #:890

Page 121

51.

The email gives reasonable consumers the misleading impression that they are already signed up for, and entitled to the benefits of, the product offered without cost or obligation.

52.

In reality, the consumers who have received this email have, at most, only “signed up” to receive marketing emails from Corporate Defendants and have not in fact enrolled in TU Credit Monitoring. They are not eligible to obtain a credit score or report directly from Corporate Defendants without incurring an additional cost. But when a consumer clicks on the “YES, SHOW ME MY CREDIT NOW” button, the consumer is taken to the Homepage Enrollment Form. 53.

The email’s only mention of a subscription price is buried in fine print below the images on the email and is insufficient to overcome the misleading net impression caused by the prominent language and orange button in the email.

54.

This misimpression is material to consumers because consumers who believed they were already enrolled in TU Credit Monitoring or eligible to obtain a credit score or report without incurring additional cost would be more likely to click the “YES, SHOW ME MY CREDIT NOW” button, travel to the Homepage Enrollment Form—which itself is misleading, as described in Paragraphs 78–91—and enroll in the TU Credit Monitoring product. 55.

By misrepresenting through these and similar emails that TU Credit Monitoring was “without cost or obligation” and by misrepresenting the material conditions of TU Credit Monitoring—specifically, its price—Corporate Defendants violated Paragraphs 40(a)(i) and (iii) of the Order and committed deceptive acts and practices. Corporate Defendants’ misrepresentations about the nature of the credit score provided 56.

Credit scores are, among other things, numerical summaries designed to predict consumer payment behavior on a wide range of credit products. Many lenders and other Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 14 of 55 PageID #:891

Page 122

commercial users rely, in part, on consumers’ credit scores when deciding whether to extend credit to a consumer.

57.

No single credit score or credit score model serves as the primary credit score for the marketplace. Lenders use a variety of credit scores, which vary by score provider, scoring model, and target industry.

58.

Credit reporting companies like Corporate Defendants, and other companies, apply various analytical scoring models to the information in consumer credit files to produce the credit scores that lenders and commercial users rely upon. 59.

Corporate Defendants generate a credit score based on a scoring model from VantageScore Solutions, LLC, which has offered several versions of its score since 2011. Corporate Defendants refer to this score as the VantageScore. 60.

In addition to selling credit scores to lenders and other commercial users, Corporate Defendants market and sell the VantageScore credit scores to consumers as a part of the TU Credit Monitoring bundle.

61.

In the Order, the Bureau found that the VantageScore credit scores were “not the same scores typically used by lenders or other commercial users for credit decisions.” Consent Order ¶ 30.

62.

Paragraph 40(c) of the Order requires Corporate Defendants, their officers, agents, servants, employees, and attorneys who have actual notice of the Order, whether acting directly or indirectly, to take the following actions, among others, when offering or providing a VantageScore credit score to consumers:

a. “[c]learly and prominently disclose the nature of the credit score offered in each communication containing the offer and, for internet offers, on at least one page of the order process” (Order ¶ 40(c)(i)); b. “[e]nsure that the disclosure clearly and prominently discloses or substantially states” that “the credit score [Corporate Defendants are] Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 15 of 55 PageID #:892

Page 123

selling is not likely to be the same score used by lenders or other commercial users for credit decisions” (Order ¶ 40(c)(ii)); and c. “[f]or written communications, including for internet offers, ensure that the disclosure contains a label in font size double that of the disclosure that says: ‘What You Need to Know’” (Order ¶ 40(c)(iii)). 63.

Corporate Defendants failed to implement these requirements in their direct marketing channel, including, on information and belief, in marketing materials used by Affiliates on Corporate Defendants’ behalf.

64.

Specifically, from the Effective Date to the present, Corporate Defendants failed to place disclosures on most display or banner advertisements covered by ¶ 40(c)(i), despite the fact that such advertisements constituted “communication[s] containing the offer.” 65.

Corporate Defendants also failed to include the required “What You Need to Know” label on any disclosures from the Effective Date until at least April 2019. 66.

Corporate Defendants have also, from the Effective Date through the present, failed to “clearly and prominently disclose or substantially state” that “the credit score [Corporate Defendants are] selling is not likely to be the same score used by lenders or other commercial users for credit decisions,” as required by ¶ 40(c)(ii) of the Order. 67.

Instead, at all times since January 2017, the relevant part of Corporate Defendants’ VantageScore disclosure for all advertisements and enrollments has stated that “[t]he credit score you receive is based on the VantageScore 3.0 and may not be the credit score model used by your lender” (emphasis added). This is substantially the same as the language Corporate Defendants used prior to the Effective Date of the Order, which stated “[t]he score you get from us may not be the one your lender uses.”

68.

Corporate Defendants’ use of “may not,” instead of the Order’s language “is not likely to be,” suggests a reasonable probability that the consumer’s lender would use the VantageScore 3.0 when making a lending decision regarding the consumer. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 16 of 55 PageID #:893

Page 124

69.

In addition to the score disclosure language, Corporate Defendants have also, in other ways, continued to misrepresent to consumers that the VantageScore they are purchasing is the same score used by lenders or other commercial users to determine creditworthiness. For example, certain of Corporate Defendants’ advertisements and landing pages offering “credit scores” after the Effective Date have represented to the consumer: “If your score is 580 or better, you can apply for a government-backed loan with the Federal Housing Administration;” “47% of employers do a credit check before hiring someone;” and “Drivers with excellent credit pay 50% less for car insurance.” Corporate Defendants’ website also features a mortgage calculator that prompts the consumer to enter her credit score, and if the consumer clicks on a link saying she is “not sure” of her credit score, she is taken to the TU Credit Monitoring enrollment process. 70.

In addition, Corporate Defendants send emails to consumers on behalf of certain lenders, marketing “personal loans” to those consumers. In those emails, Corporate Defendants embed advertisements for TU Credit Monitoring that say, for example: “P.S. you may want to see your credit score before applying for a personal loan.” If a consumer clicks on the embedded link, the consumer is taken to the TU Credit Monitoring enrollment process. 71.

In fact, there is no way for Corporate Defendants or a consumer to know which credit score model or particular credit score a lender may rely upon when making a credit decision related to that consumer. Indeed, when responding to consumer complaints about credit scores, Corporate Defendants have admitted that “there are hundreds of scoring models utilized today from financial institutions throughout the United States. Each scoring model is chosen by the financial institution based on criteria they specify in relation to their business needs.” 72.

For certain consumers, there are significant and meaningful differences between the VantageScore credit scores marketed and sold to consumers and the variety of credit scores used by lenders.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 17 of 55 PageID #:894

Page 125

73.

As a result, for these consumers, the scores Corporate Defendants marketed and sold to them presented an inaccurate picture of how lenders, the vast majority of which use other scores and data providers, assess their creditworthiness.

74.

Corporate Defendants’ failure to include the required disclosures on each internet advertising page, their failure until April 2019 to include the “What You Need to Know” label on any disclosures, and their failure to change their disclosure about VantageScore’s prevalence from an assertion that it “may not” be used by a consumer’s lender to the fact that it is “not likely to” be used by a consumer’s lender, renders their conduct as essentially unchanged from prior to the Order.

75.

Thus, it remains the case that Corporate Defendants “have represented, directly or indirectly, expressly or impliedly, that the credit scores they market and sell to consumers are the same scores typically used by lenders or other commercial users for credit decisions,” as the Bureau found in the Order. Order ¶ 29. Such representations are likely to affect consumers’ conduct or decisions regarding whether to provide payment information and have misled or have been likely to mislead consumers acting reasonably under the circumstances. 76.

These score representations are unsubstantiated and, therefore, deceptive because, as discussed above, Corporate Defendants lack a reasonable basis to assert that there is a reasonable probability that a lender would specifically use the VantageScore when making a lending decision about a consumer, instead of any of the hundreds of commercial and proprietary scoring models available.

77.

By failing to make the required disclosures, Corporate Defendants have violated Paragraph 40(c) of the Order and have continued to engage in deceptive acts and practices.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 18 of 55 PageID #:895

Page 126

Corporate Defendants’ misrepresentations regarding the purpose for which payment information would be used 78.

Paragraph 40(a)(ii) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order from misrepresenting, directly or indirectly, expressly or impliedly, “[a]ny material fact about the timing or manner of any charge or bill, . . . the purpose for which a consumer’s credit card or payment information will be used, . . . the date(s) upon which the consumer will be charged or billed, and the deadline (by date or frequency) by which the consumer must act in order to stop any charges[.]” 79.

After the Order’s Effective Date, Corporate Defendants violated Paragraph 40(a)(ii) by giving consumers the misleading impression that their payment information was requested for purposes other than payment and that they would not be immediately charged. Corporate Defendants made these misrepresentations in connection with the Homepage Enrollment Form.

80.

At least since the Order’s Effective Date through the present, when a consumer clicks on a TU Credit Monitoring advertisement or landing page that Corporate Defendants did not place through an Affiliate, she is taken to the Homepage Enrollment Form. The form asks the consumer to “Tell Us About Yourself” and provide personal information. 81.

After the consumer provides personal information, the form then asks the consumer to create a login to Corporate Defendants’ website and to provide payment information. Although Corporate Defendants use that payment information to charge consumers, there is no indication that consumers will immediately be charged. 82.

Instead, in close proximity to the request for payment information, Corporate Defendants represent that the consumer has authorized TUI to use “personal information you provide during the enrollment process . . . to confirm your identity, display your credit data to you and provide you with personalized offers.”

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 19 of 55 PageID #:896

Page 127

83.

Consumers are also asked to answer questions about their financial history, such as the balance of their mortgage, in order to verify their identities and pull their credit files. Some consumers are given the option of verifying their identity with an authorization code. 84.

The last step many consumers take before their cards are charged is to click on a Call to Action that says, “VERIFY MY IDENTITY” or other language indicating that the consumer assents to having Corporate Defendants confirm his or her identity. For other consumers, the last button they click says “GET MY CREDIT SCORE.” But even after clicking those final buttons, nothing on the screen tells consumers they have been charged; they simply gain access to the TU Credit Monitoring consumer portal.

85.

Corporate Defendants have used substantially the same Homepage Enrollment Form for all enrollments into TU Credit Monitoring through transunion.com during any given time period, except that consumers who clicked on advertisements on annualcreditreport.com are asked to verify their identity at an earlier point than other consumers. 86.

The only indication in the enrollment process that consumers are making some sort of purchase is through a fine print, low contrast disclosure, located off to the side of the enrollment form. The disclosure is inside an image that can take up to 30 seconds longer to load than the rest of the material in the form.

87.

For consumers residing in California only, Corporate Defendants provide an additional disclosure. But it appears in fine print, makes reference solely to a monthly charge, and fails to warn consumers that they will be charged immediately. 88.

These fine print disclosures about monthly charges are not sufficiently clear or prominent to overcome the impression left by the rest of the enrollment form that the payment information was for a purpose other than payment.

89.

The net impression created by the types of misrepresentations in the Homepage Enrollment Form has misled, or has been likely to mislead, consumers acting reasonably under the circumstances. Since the Order’s Effective Date, Corporate Defendants have received Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 20 of 55 PageID #:897

Page 128

thousands of complaints and refund requests from consumers who did not understand how they came to be enrolled in a paid monthly subscription product, including many consumers who specifically stated that they had provided their payment information believing that Corporate Defendants were requesting it to verify their identities, not to charge them. 90.

The Homepage Enrollment Form was likely to affect consumers’ conduct or decisions regarding whether to provide payment information. 91.

Corporate Defendants’ misrepresentations in connection with the Homepage Enrollment Form, made from at least the Effective Date through the present, violated Paragraph 40(a)(ii) of the Order. This conduct was also deceptive. Corporate Defendants offered Negative Option enrollments to consumers without obtaining express informed consent 92.

Paragraph 40(b)(i) of the Order requires Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, to “obtain the express informed consent from the consumer” before enrolling any consumer into a Credit-Related Product with a Negative Option feature. “Negative Option” is defined by Paragraph 3(j) of the Order as a “category of commercial transactions in which a seller markets an offer for a trial period and the seller then interprets a customer’s failure to take an affirmative action, either to reject an offer or cancel an agreement, as assent or continuing assent to be charged for goods or services.”

93.

Specifically, Paragraph 40(b)(i)(1) provides that, for internet offers, “express informed consent” in connection with a Negative Option feature requires “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature (i.e., it cannot be pre-checked), and which clearly and conspicuously states that the consumer agrees to be billed for the product unless the consumer cancels before the trial period expires[.]” 94.

Paragraph 40(b)(i)(2) requires that “[i]mmediately adjacent to the affirmative selection checkbox,” Corporate Defendants “must clearly and conspicuously disclose: (i) if Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 21 of 55 PageID #:898

Page 129

applicable, the amount the consumer will be charged on a recurring (e.g., monthly) basis if the product or service is not cancelled before the expiration of the trial period; and (ii) the date when the trial period expires and the amount the consumer will be billed[.]” 95.

After the Order’s Effective Date, Corporate Defendants, acting directly and indirectly, continued to enroll consumers into Credit-Related Products with Negative Option features without obeying the specific requirements set forth in Paragraphs 40(b)(i)(1) and (2). Specifically, for most Negative Option enrollments that Corporate Defendants have completed since the Effective Date, which represent millions of consumer enrollments, Corporate Defendants have failed to use an affirmative selection checkbox as required by Paragraph 40(b)(i). 96.

These Negative Option enrollments that violated the Order occurred in two ways: (a) via the enrollment processes hosted on Corporate Defendants’ own website after consumers were directed there from advertisements on annualcreditreport.com and elsewhere, including on popular websites and in email marketing campaigns; and (b) via enrollment processes hosted by Affiliates on behalf of and at the direction of Corporate Defendants. 97.

For example, between January 2017 and January 2019, for certain consumers who had viewed and clicked on advertisements on annualcreditreport.com, Corporate Defendants enrolled those consumers into TU Credit Monitoring subscriptions with Negative Option features. Like the Homepage Enrollment Form, none of the enrollment forms consumers completed contained “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants nonetheless enrolled those consumers into TU Credit Monitoring subscriptions with Negative Option features after the consumers completed enrollment forms. 98.

Following the Effective Date until sometime in 2020, Corporate Defendants failed to decommission certain trial offers for Credit-Related Products that had been made to consumers prior to the Effective Date. Like the Homepage Enrollment Form, none of the enrollment forms consumers completed contained “a check box on the final order page that consumers must Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 22 of 55 PageID #:899

Page 130

affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants nonetheless enrolled those consumers into Credit-Related Products with Negative Option features after the consumers completed enrollment forms. 99.

From March 2017 to the present, millions of consumers clicked on advertisements for Credit-Related Products that were placed on Corporate Defendants’ behalf by ConsumerTrack and other Affiliates. The enrollment forms that these consumers completed did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Corporate Defendants, acting directly or indirectly, or through an agent, nonetheless enrolled those consumers into Credit-Related Products with Negative Option features after the consumers completed enrollment forms. 100.

For example, on or about November 21, 2020, ConsumerTrack placed the advertisement in Figure 3 on a third-party website.

Figure 3 101.

Consumers who clicked on this advertisement were ultimately taken to Affiliate Enrollment Form D.1. The enrollment form did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 23 of 55 PageID #:900

Page 131

regarding billing at all. Nonetheless, after a consumer completed and submitted the enrollment form, Corporate Defendants, acting directly or indirectly, or through an agent (1) enrolled the consumer into the TU Credit Monitoring product; (2) charged the consumer $1; and (3) and sent the consumer an email with login instructions for the TU Credit Monitoring portal on transunion.com. After the expiration of the trial period, Corporate Defendants charged the consumers automatically and indefinitely for each month of the subscription until the consumers contacted Corporate Defendants to cancel the subscription. 102.

In another example, on or about March 30, 2021, ConsumerTrack placed the advertisement in Figure 4 on a third-party website.

Figure 4 103.

Consumers who clicked on this advertisement were taken to Affiliate Enrollment Form D.2. The enrollment form did not contain “a check box on the final order page that consumers must affirmatively check to select the Negative Option feature,” or any check box regarding billing at all. Nonetheless, after the consumer completed and submitted the enrollment form, Corporate Defendants, acting directly or indirectly, or through an agent (1) enrolled the consumer into the TU Credit Monitoring product; (2) charged the consumer $1; and (3) and sent the consumer an email with login instructions for the TU Credit Monitoring portal on transunion.com. After the expiration of a trial period, Corporate Defendants charged the Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 24 of 55 PageID #:901

Page 132

consumers automatically and indefinitely for each month of the subscription until the consumers contacted Corporate Defendants to cancel the subscription. 104.

This conduct violated Paragraph 40(b)(i) of the Order.

Corporate Defendants continued to misrepresent that TU Credit Monitoring was “free” or $1 in connection with Negative Option enrollments 105.

As set forth above, paragraph 40(a)(i) of the Order prohibits Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, from misrepresenting, expressly or impliedly, “[a]ny material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges[.]”

106.

After the Order’s Effective Date, Corporate Defendants continued using advertisements for subscription Credit-Related Products that misrepresented to consumers that they would have access to “free” or $1 credit scores and credit reports, as reflected in Figures 3 and 4. These misrepresentations primarily occurred through advertisements placed by Affiliates on behalf of, at the direction of, Corporate Defendants.

107.

In fact, these advertisements were associated with a Negative Option billing structure, and consumers who completed an Affiliate Enrollment Form were enrolled by Corporate Defendants into a trial offer for TU Credit Monitoring. After the trial period, consumers who did not cancel their subscriptions were immediately enrolled in an indefinite paid monthly subscription for TU Credit Monitoring.

108.

Corporate Defendants failed to adequately disclose the Negative Option feature. The disclosures, if any, in the advertisements or in the Affiliate Enrollment Forms were neither clear nor conspicuous. And, as set forth in Paragraphs 92–107, Corporate Defendants failed to Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 25 of 55 PageID #:902

Page 133

obtain consumers’ express informed consent to enrollment in the Negative Option feature. This rendered Corporate Defendants’ conduct essentially unchanged from prior to the Effective Date. 109.

Corporate Defendants’ misrepresentations in connection with Affiliate advertisements and enrollments into TU Credit Monitoring subscriptions with Negative Option features violated Paragraph 40(a)(i) of the Order. This conduct was also deceptive. Corporate Defendants failed to obtain required authorization for recurring charges to consumers’ accounts 110.

Section 903(10) of EFTA, 15 U.S.C. § 1693a(10), provides that the term “preauthorized electronic fund transfer” means “an electronic fund transfer authorized in advance to recur at substantially regular intervals[.]”

111.

Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), provides that a “preauthorized” electronic fund transfer from a consumer’s account must be “authorized by the consumer only in writing, and a copy of such authorization shall be provided to the consumer when made.” Section 1005.10(b) of EFTA’s implementing regulation, Regulation E, 12 C.F.R. Part 1005, requires that “[p]reauthorized electronic fund transfers from a consumer’s account may be authorized only by a writing signed or similarly authenticated by the consumer. The person that obtains the authorization shall provide a copy to the consumer.”

112.

Section 1005.10 of the Official Interpretations to Regulation E, 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 5, clarify that “[t]he authorization process should evidence the consumer’s identity and assent to the authorization.” The Interpretations further clarify that “[a]n authorization is valid if it is readily identifiable as such and the terms of the preauthorized transfer are clear and readily understandable.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 6. 113.

Some consumers entered their debit card information into Corporate Defendants’ enrollment forms, including Homepage Enrollment Forms and Affiliate Enrollment Forms. Corporate Defendants debited these consumers’ monthly charges for TU Credit Monitoring from the consumers’ bank accounts.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 26 of 55 PageID #:903

Page 134

114.

Corporate Defendants’ monthly charge for TU Credit Monitoring to a debit card is a “preauthorized electronic fund transfer” within the meaning of EFTA. Corporate Defendants’ enrollment forms contain no separate language of consumer authorization for a specific amount of recurring payments to be charged to consumers’ debit cards. 115.

For example, in the Homepage Enrollment Form, the button below the payment information field labeled “I Accept & Continue to Step 3” is accompanied by an explanation of some usages of the consumer’s information that the consumer is accepting, but it makes no mention of recurring payments.

116.

Specifically, just above the button, the Homepage Enrollment Form states: “By clicking on the “I Accept & Continue to Step 3” button below, you are providing written instructions to [TUI] authorizing [TUI] to obtain and use on a recurring basis with your membership, personal information that you provide during the enrollment process, as well as information from your credit profiles at Transunion, Experian and/or Equifax to confirm your identity, display your credit data to you and provide you with personalized offers from Transunion’s partners that are based on your personal information and credit scores.” 117.

Likewise, in the Affiliate Enrollment Forms in Appendix D, the text below the debit or credit card information field states, “You are agreeing to the service agreement and providing written instructions to [TUI] to obtain information from your personal credit profile from Experian, Equifax, and/or TransUnion. You authorize [TUI] to obtain such information solely to confirm your identity and display your credit data to you.” The text is accompanied by an orange button that states “VIEW CREDIT SCORE.”

118.

In the Homepage and Affiliate Enrollment Forms, other than the variations of them for California consumers as described below, the sole references to specific charges appear on other pages of the forms where consumers are asked to enter only identifying information such as address and date of birth. These disclosures are inadequate and misleading. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 27 of 55 PageID #:904

Page 135

119.

For the Homepage Enrollment Form, the consumer’s clicking “I Accept & Continue to Step 3” is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 120.

For the Affiliate Enrollment Form, the consumer’s clicking “VIEW CREDIT SCORE” is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 121.

For California consumers only, the disclosure above “I Accept & Continue to Step 3” in the Homepage Enrollment Form includes additional language regarding monthly payments. But given the placement and content of this additional language, the consumer’s clicking “I Accept & Continue to Step 3” in this context is not a signed or authenticated statement in writing that the consumer authorizes debits to the consumer’s bank account on a monthly schedule, as required by EFTA and Regulation E. That action by the consumer is not a readily identifiable authorization. Nor were the terms of the preauthorized transfer clear and readily understandable. 122.

Consequently, Corporate Defendants’ recurring charges to consumers who enrolled in TU Credit Monitoring using the Homepage Enrollment Form, Affiliate Enrollment Forms, or similar forms and paid with a debit card were not authorized in accordance with the requirements of EFTA and Regulation E.

123.

Further, as Corporate Defendants never obtained an adequate signed or authenticated statement that consumers authorized recurring charges on their debit cards to pay for TU Credit Monitoring, Corporate Defendants could not and did not provide a copy of such a statement to the consumer, as required by EFTA and Regulation E. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 28 of 55 PageID #:905

Page 136

Corporate Defendants Violated the Order and Regulation V and Engaged in Deceptive Acts and Practices in Their Marketing of Credit-Related Products on annualcreditreport.com 124.

The Fair Credit Reporting Act (FCRA) imposes on each NCRA an obligation to provide a free file disclosure (i.e., credit report) once every 12 months to any consumer who requests it. 15 U.S.C. § 1681j(a). Regulation V, FCRA’s implementing regulation, requires all NCRAs to jointly design, fund, implement, maintain, and operate a “centralized source” to enable consumers to obtain free annual file disclosures from all NCRAs. 12 C.F.R. § 1022.136. The centralized source for free annual file disclosures is the website annualcreditreport.com. 125.

A consumer who seeks to obtain her free credit report through annualcreditreport.com must first provide certain identifying information on the website, including her name, social security number, and current address. The consumer must then answer questions to verify her identity, which are similar to those in page 3 of the Homepage Enrollment Form. The consumer is then given a choice to obtain her file disclosure from one or more of the NCRAs, including Corporate Defendants.

126.

Corporate Defendants control the placement of advertising for TransUnionbranded products and services on annualcreditreport.com and operate the website that consumers access through annualcreditreport.com to obtain their free annual file disclosures from Corporate Defendants.

127.

Between February 2014 and March 2020, when Corporate Defendants delivered a free annual file disclosure to a consumer, Corporate Defendants placed a prominent “Call to Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 29 of 55 PageID #:906

Page 137

Action” button advertisement for a “credit score” at the top of the free annual file disclosure. The image in Figure 5 is one of the advertisements used frequently by Corporate Defendants:

Figure 5 128.

The button advertisement was a misrepresentation. By inviting consumers to “see” or “add” their “credit score,” the button gave consumers the false impression that the credit score was part of their free file disclosure. But in reality, the product Corporate Defendants were advertising was their bundled, paid subscription product, TU Credit Monitoring. 129.

Corporate Defendants designed the button advertisements to appear in a bright color and large font, and strategically placed them just under the consumer’s name on the free file disclosure. The button’s placement compounded the false impression that the “score” was part of the consumer’s free file disclosure. The button was much more prominent than, and placed above, the option to print or save a pdf of the file disclosure, which was located in much smaller print below the ad.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 30 of 55 PageID #:907

Page 138

130.

Figure 6 reflects the placement of the button advertisement on a test consumer’s file disclosure:

Figure 6 131.

The misrepresentation created by the button advertisement was material. By giving consumers the false impression that the score was part of their free annual file disclosure, Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 31 of 55 PageID #:908

Page 139

the button advertisements influenced many consumers to click on them unwittingly. Consumers, acting reasonably under the circumstances, were misled by the button advertisements. 132.

Corporate Defendants’ button advertisement offered a “credit score” ancillary to consumers’ receipt of their free file disclosure. Therefore, the button advertisement falsely represented that the “credit score” was free.

133.

The button advertisements interfered with, detracted from, contradicted, or otherwise undermined the purpose of annualcreditreport.com. Upon clicking on the button advertisements, consumers were diverted from their free annual file disclosure on annualcreditreport.com and into an enrollment process that was substantially similar to the Homepage Enrollment Form, except that consumers had already answered identity verification questions similar to those in page 3 of the Homepage Enrollment Form in order to obtain their free report. Some consumers were unable to return to their free annual file disclosure after being diverted to the enrollment process, even if they did not ultimately enroll in the product. 134.

By misrepresenting, expressly or impliedly, that the credit score was free, the button advertisement on consumers’ free file disclosures also violated Paragraph 40(a)(i) of the Order.

135.

By misrepresenting, expressly or impliedly, that the score was part of the consumer’s annual file disclosure when, in truth and in fact, a material condition of receiving the score was enrollment in a paid subscription product, the button advertisement on consumers’ free file disclosures also violated Paragraph 40(a)(iii) of the Order. 136.

Just since January 3, 2017, Corporate Defendants have received hundreds of complaints and refund requests from consumers who had sought to obtain their free annual file disclosures from annualcreditreport.com and did not understand how they came to be enrolled in a paid monthly subscription product.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 32 of 55 PageID #:909

Page 140

137.

Corporate Defendants’ misrepresentations in connection with providing consumers’ free file disclosures violated Paragraphs 40(a)(i) and (iii) of the Order, 12 C.F.R. §§ 1022.136(g)(2)-(3), and were deceptive.

Corporate Defendants Violated the Order and Engaged in Deceptive Acts and Practices by Making it Difficult and Confusing for Consumers to Cancel Subscriptions for Credit-Related Products 138.

Paragraph 40(b)(ii) of the Order requires Corporate Defendants and their officers, agents, and employees who have actual notice of the Order, whether acting directly or indirectly, to “provide a simple mechanism for a consumer to immediately cancel the purchase of any Credit- Related Product, and stop billing and collecting payments for any recurring charge for any good or service.” It further requires that the cancellation mechanism “must not be difficult, costly, confusing, or time consuming, and must, at a minimum, be substantially similar to the mechanism(s) the consumer used to initiate the purchase of any Credit-Related Product[.]” 139.

As of at least the Effective Date until the present, Corporate Defendants have not provided any online mechanism for consumers to immediately cancel the purchase of a Credit- Related Product. Rather, consumers who inadvertently enroll into a Credit-Related Product and want to immediately cancel the purchase must call Corporate Defendants’ customer service line. But even when consumers called, Corporate Defendants often refused to allow consumers to immediately cancel their purchases and obtain a refund. Corporate Defendants would, instead, tell consumers that they would remain enrolled in the product for the remainder of the month they had inadvertently purchased, and no refund would be given. Cancelling the purchase thus was “time-consuming,” and it was not “immediate[],” “simple,” or “substantially similar” to the online mechanism the consumer used to initiate the purchase. 140.

Corporate Defendants have also not provided a simple mechanism for cancellation of future recurring charges. Though Corporate Defendants added an online cancellation function to their website after the Order, it is difficult to locate: many consumers have complained that Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 33 of 55 PageID #:910

Page 141

they were not able to find it and had to call Corporate Defendants’ customer service line to cancel future payments.

141.

Specifically, since shortly after the Order’s Effective Date through the present, a consumer who would like to cancel a TU Credit Monitoring subscription online must first go to a small “support” link on the homepage. Then, the consumer must click on language that says, “You may cancel your membership here.”

142.

But instead of allowing the consumer to cancel at that point, Corporate Defendants take the consumer through a series of confusing screens and questions designed to keep the consumer enrolled in TU Credit Monitoring.

143.

First, Corporate Defendants present the consumer with additional information about product benefits and what the consumer would “lose” by canceling TU Credit Monitoring. At the bottom of the product benefits screen, Corporate Defendants present the consumer with a confusing choice:

Figure 7 144.

The prominent yellow button on the right of Figure 7 offers to take the consumer “BACK TO MY DASHBOARD.” This is confusing because it actually means that the consumer will exit the cancellation process and will continue to be enrolled in TU Credit Monitoring. 145.

After clicking on the less prominent blue “Continue & Cancel” text, many consumers are taken to yet another screen and presented with various retention offers for discounts to TU Credit Monitoring. At the bottom of the retention offer screen, reflected in Figure Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 34 of 55 PageID #:911

Page 142

8, the consumer is presented again with a choice between a prominent yellow button and smaller blue text.

Figure 8 146.

The prominent yellow button in Figure 8 takes the consumer out of the cancellation process and the consumer remains enrolled in TU Credit Monitoring. Only when a consumer clicks on the blue “Cancel My Membership” text is the consumer allowed to cancel the TU Credit Monitoring subscription.

147.

Corporate Defendants’ cancellation process for Credit-Related Products therefore has been and remains difficult, costly, confusing or time-consuming. 148.

Corporate Defendants have received thousands of refund requests and hundreds of complaints from consumers who wished to cancel their subscriptions and were unable to do so online.

149.

After the Effective Date through the present, and despite knowing that consumers found the cancellation process to be difficult, costly, confusing, and time-consuming, Corporate Defendants failed to make their cancellation mechanism simple, in violation of Paragraph 40(b)(ii) of the Order.

150.

In addition, after consumers cancel their TU Credit Monitoring subscriptions, whether refunds are given or not, Corporate Defendants mount a campaign of deception to induce consumers to re-enroll in the product. Upon cancelling, consumers receive an email warning that if they do not re-enroll in TU Credit Monitoring, the consumer will no longer be able to “make your TransUnion report off-limits to thieves with 1-touch Credit Lock.” The consumer Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 35 of 55 PageID #:912

Page 143

is also warned in a second email at the end of the final month of enrollment that “Your credit report is unlocked.”

151.

These emails give consumers the misleading impression that they have publicly exposed the information in their TransUnion credit report by cancelling, and that re-enrolling in the product is the only way that consumers can protect the information in their credit report from “thieves.”

152.

In reality, the cancellation of a TU Credit Monitoring subscription should simply return the consumer’s credit report to the same status as before he or she enrolled in TU Credit Monitoring, and should not cause the consumer’s information to become publicly exposed. In addition, a free security freeze provides the same security features as the (not free) TU Credit Monitoring “Credit Lock.” Both block new application inquiries on a consumer’s credit file. 153.

Corporate Defendants’ website compounded the misleading nature of their reenrollment messages by making false statements. For example, on a webpage titled “Why Credit Lock is a Game Changer,” Corporate Defendants misrepresented until at least May 2021 that a TU Credit Monitoring “Credit Lock” is better than a security freeze because security freezes are “pretty dramatic” and cost consumers $2-$10 depending on the state where a consumer lives. But in reality, under federal law, a consumer has been able to freeze or unfreeze his or her credit report with any NCRA at no charge since September 21, 2018, and obtain the same security features as the (not free) TU Credit Monitoring “Credit Lock.”

154.

The false and misleading representations made in Corporate Defendants’ postcancellation emails were likely to affect consumers’ conduct or decisions regarding whether to reenroll into a TU Credit Monitoring subscription.

155.

By misrepresenting facts material to consumers, the post-cancellation emails also violated Paragraph 40(a)(iii) of the Order. This conduct was also deceptive.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 36 of 55 PageID #:913

Page 144

Corporate Defendants Violated the Order by Failing to Collect, Review and Assess Information and Data for Evidence of Consumer Confusion 156.

Paragraph 40(d) of the Order requires Corporate Defendants and their officers to regularly collect, review and assess, among other things, consumer complaints, cancellation rates, and empirical data regarding consumers’ perceptions of Corporate Defendants’ advertising for evidence of consumer confusion about the Credit-Related Products, including the price and other material terms of those products. Paragraph 40(d) also requires Corporate Defendants and their officers to regularly review, assess and, as necessary, modify Corporate Defendants’ advertising “to improve consumer understanding of Credit-Related Products in light of empirical evidence.” 157.

Corporate Defendants and their officers have failed to undertake the required collection, review and assessment of consumer complaints and empirical data, or the review, assessment and modification of their advertisements as required by the Order. Corporate Defendants Violated the Order by Failing to Create and Retain Required Records 158.

Paragraph 68 of the Order requires Corporate Defendants to create and retain for at least five years from the Effective Date of the Order nine specified categories of documents related to the violations addressed in the Order.

159.

Corporate Defendants failed to create and retain the records required under the Order.

Corporate Defendants Violated the Order by Failing to Distribute It to, and Obtain Acknowledgements from Required Persons 160.

Under Paragraph 65 of the Order, within 30 days of the Effective Date, Corporate Defendants were required to deliver a copy of the Order to “each of their board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who have responsibilities related to the subject matter of the [Order].” 161.

Paragraph 66 of the Order requires that, for five years from the Effective Date, Corporate Defendants must deliver a copy of the Order to “any future board members and Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 37 of 55 PageID #:914

Page 145

executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who will have responsibilities related to the subject matter of the [Order] before they assume their responsibilities.” 162.

Paragraph 67 of the Order requires that Corporate Defendants secure a signed and dated statement acknowledging receipt of a copy of the Order within 30 days of delivery from all persons receiving a copy of the Order under Paragraphs 65 and 66 of the Order. 163.

Corporate Defendants did not secure the required acknowledgment of receipt of the Order from all executive officers as required by the Order. 164.

Specifically, Corporate Defendants did not secure the required acknowledgement from the Company’s current Chief Executive Officer until March 23, 2021 – approximately 22 months after he assumed his responsibilities as CEO and a member of the TransUnion board. 165.

Corporate Defendants also failed to deliver a copy of the Order to numerous other board members and executive officers before they assumed their duties, as required by Paragraph 66 of the Order, or to timely secure from those individuals the acknowledgment required by Paragraph 67 of the Order.

DANAHER’S ORDER VIOLATIONS 166.

As the President of TUI for many years before the Effective Date until on or about April 1, 2021, and as Executive Vice President of TUI from April 2, 2021 until at least February 1, 2022, Danaher was responsible for, had the authority to control, and did in fact control, the manner in which TUI marketed Credit-Related Products to consumers. 167.

Danaher has had actual notice of the Order since January 3, 2017. 168.

Danaher, acting directly or indirectly, including through omissions or failures to act, violated Consent Order Paragraph 40 and its subparagraphs (a)-(d). 169.

From at least the Effective Date through the present, Danaher has had actual knowledge of, or recklessly disregarded, TUI’s violations of the Order. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 38 of 55 PageID #:915

Page 146

170.

Notwithstanding his personal legal obligations (as specified by Order Paragraphs 40 and its subparagraphs (a)-(d)) as TUI’s President and Executive Vice President with actual notice of the Order, Danaher failed to ensure Corporate Defendants’ compliance with the Order, despite having the authority to do so and knowledge or reckless disregard of the Consent Order violations committed by Corporate Defendants.

171.

In fact, Danaher, along with others, determined that complying with the Order would reduce TUI’s revenue and created a plan to delay or avoid implementation of the requirements of Paragraph 40 of the Order. For example, among other things, shortly after the Effective Date, Danaher determined that using the affirmative selection checkbox required by Order Paragraph 40(b)(i) in connection with Negative Option enrollments resulted in fewer enrollments into TU Credit Monitoring and therefore lower revenue. In or about March or April 2017, Danaher instructed TUI to cease using the checkbox in Affiliate marketing, leading to millions of enrollments that violated the Order.

172.

Danaher knew or recklessly disregarded that consumers continued to be confused and deceived by Corporate Defendants’ marketing after the Effective Date. Specifically, Danaher received reports of consumer complaints, refund requests, and credit-card chargebacks (consumer disputes about charges) reflecting consumers’ confusion as to why TUI charged them for indefinite paid credit monitoring subscriptions, consumers’ difficulty canceling their subscriptions, and other complaints. Danaher also received similar communications from consumers who obtained executives’ contact information and sought help directly from them. Nevertheless, Danaher knowingly or recklessly failed to require TUI to comply with the Order by ensuring its marketing of Credit-Related Products was neither confusing nor deceptive. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 39 of 55 PageID #:916

Page 147

COUNT I: VIOLATIONS OF THE ORDER (CORPORATE DEFENDANTS) 173.

The Bureau incorporates the allegations set forth in Paragraphs 1–109 and 124– 172 of this Complaint.

174.

Under § 1036(a)(1)(A) of the CFPA, it is unlawful for covered persons, such as Corporate Defendants, to “offer or provide to a consumer any financial product or service not in conformity with Federal consumer financial law, or otherwise commit any act or omission in violation of a Federal consumer financial law[.]” 12 U.S.C. § 5536(a)(1)(A). 175.

“Federal consumer financial law” is defined to include an “order prescribed by the Bureau.” 12 U.S.C. § 5481(14).

176.

The Order is an “order prescribed by the Bureau.” 177.

Corporate Defendants, acting directly and indirectly, through the TU Common Enterprise, or through an agent, violated the Order by: a. misrepresenting, expressly or impliedly, material facts about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges, in violation Paragraph 40(a)(i) of this Order, as set forth in: i. Paragraphs 45–55 of this Complaint (misrepresenting consumers’ enrollment status);

ii. Paragraphs 105–109 of this Complaint (misrepresenting that scores or reports were “free” or “$1”), and iii. Paragraphs 124–137 of this Complaint (misrepresenting that scores on annualcreditreport.com were part of a consumer’s free file disclosure);

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 40 of 55 PageID #:917

Page 148

b. misrepresenting, expressly or impliedly, material facts about the timing or manner of any charge or bill, the purpose for which a consumer’s credit card or payment information will be used, the date(s) upon which the consumer will be charged or billed, and the deadline by which the consumer must act in order to stop any charges, in violation of Paragraph 40(a)(ii) of the Order, as set forth in Paragraphs 78–91 of this Complaint (misrepresenting that payment information would be used for identity verification purposes);

c. misrepresenting, expressly or impliedly, material facts about the conditions, nature, or central characteristics of TU Credit Monitoring, in violation of Paragraph 40(a)(iii) of the Order, as set forth in: i. Paragraphs 32–44 of this Complaint (misrepresenting the nature of TU Credit Monitoring by advertising it as merely a “score” or “report”);

ii. Paragraphs 45–55 of this Complaint (misrepresenting consumers’ enrollment status in TU Credit Monitoring); iii. Paragraphs 124–137 of this Complaint (misrepresenting that a score was part of a consumer’s annual file disclosure when receiving the score was conditioned on enrollment in a paid subscription product); and iv. Paragraphs 150–155 of this Complaint (misrepresenting the effect of cancellation of a TU Credit Monitoring subscription on a consumer’s credit report);

d. failing to obtain express informed consent from consumers before enrolling them into products with Negative Option features, in violation of Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 41 of 55 PageID #:918

Page 149

Paragraph 40(b)(i) of the Order, as set forth in Paragraphs 92–104 of this Complaint;

e. failing to provide consumers with a simple mechanism that is not costly, confusing, or time consuming for cancellation of enrollment, and failing to permit consumers to immediately cancel a purchase, in violation of Paragraph 40(b)(ii) of the Order, as set forth in in Paragraphs 138–155 of this Complaint;

f. offering or providing VantageScore credit scores to consumers without required disclosures, in violation of Paragraph 40(c) of the Order, as set forth in Paragraphs 56–77 of this Complaint;

g. failing to collect, review and assess the required information and data, and failing to modify their advertising of Credit-Related Products in light thereof, in violation of Paragraph 40(d) of the Order, as set forth in Paragraphs 156–157 of this Complaint;

h. failing to deliver the Order to, and obtain a signed and dated acknowledgment of receipt of the Order from, all board members, executive officers, and other required recipients, in violation of Paragraphs 65-67 of the Order, as set forth in Paragraphs 160–165 of this Complaint; and i. failing to create or retain required records, in violation of Paragraph 68 of the Order, as set forth in Paragraphs 158–159 of this Complaint. 178.

By violating the requirements of Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), and (d) of the Order, Corporate Defendants offered and provided to consumers financial products and services not in conformity with Federal consumer financial law. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 42 of 55 PageID #:919

Page 150

179.

By violating the requirements of Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), and (d) and 65-68 of the Order, Corporate Defendants committed acts or omissions that violated Federal consumer financial law.

180.

Accordingly, Corporate Defendants violated § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another. COUNT II: VIOLATIONS OF THE ORDER (DANAHER) 181.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–157; and 166–172 of this Complaint.

182.

Under § 1036(a)(1)(A) of the CFPA, it is unlawful for covered persons to “offer or provide to a consumer any financial product or service not in conformity with Federal consumer financial law, or otherwise commit any act or omission in violation of a Federal consumer financial law[.]” 12 U.S.C. § 5536(a)(1)(A).

183.

“Federal consumer financial law” is defined to include an “order prescribed by the Bureau.” 12 U.S.C. § 5481(14).

184.

The Order is an “order prescribed by the Bureau.”

185.

Danaher has had actual knowledge of the Order since January 3, 2017. 186.

As President of TUI, after the Order’s Effective Date until April 1, 2021, and as Executive Vice President of TUI from April 2, 2021 until at least February 1, 2022, Danaher had responsibility for ensuring that TUI complied with Federal consumer financial law and the Order. 187.

From at least January 3, 2017 until at least February 1, 2022, as an officer of TUI, Danaher was a “related person” and a “covered person” under the CFPA, 12 U.S.C. § 5481(25). 188.

Danaher, acting directly or indirectly, violated the Order, including by failing to ensure that TUI took the affirmative actions required by Paragraphs 40(a)(i)-(iii), (b)(i)-(ii), (c), Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 43 of 55 PageID #:920

Page 151

and (d) of the Order and refrained from engaging in acts prohibited by those paragraphs of the Order, as set forth in Paragraph 177(a)–(g).

189.

Therefore, Danaher committed acts and omissions in violation of a Federal consumer financial law.

190.

Accordingly, Danaher violated § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A).

COUNT III: DECEPTIVE ACTS AND PRACTICES (CORPORATE DEFENDANTS) 191.

The Bureau incorporates the allegations set forth in Paragraphs 1–172 of this Complaint.

192.

Section 1036(a)(1)(B) of the CFPA prohibits covered persons from engaging in deceptive acts or practices. 12 U.S.C. § 5536(a)(1)(B). 193.

An act or practice is deceptive if it involves a material misrepresentation or omission that is likely to mislead consumers acting reasonably under the circumstances. Information is material to consumers if it is likely to affect a consumer’s conduct regarding the product or service.

194.

Corporate Defendants, acting directly and indirectly, through the TU Common Enterprise, or through an agent, have engaged in the following deceptive acts and practices: a. Deceptive Acts and Practices Regarding the Nature and Central Characteristics of TU Credit Monitoring 195.

Corporate Defendants’ representations about the nature and central characteristics of TU Credit Monitoring, made from the Effective Date through the present, have been deceptive.

196.

As set forth in Paragraphs 32–44 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that Corporate Defendants offered consumers the ability to see or purchase a standalone credit report or score. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 44 of 55 PageID #:921

Page 152

197.

These representations were false because, in truth and in fact, Corporate Defendants were actually offering an ongoing subscription for credit monitoring and were not offering consumers the ability to see or purchase a standalone credit report or score. b. Deceptive Acts and Practices Regarding Consumers’ Enrollment Status 198.

Corporate Defendants’ representations in marketing emails about consumers’ enrollment status in TU Credit Monitoring, made from the Effective Date through the present, have been deceptive.

199.

As set forth in Paragraphs 45–55 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that consumers are already signed up for, and entitled to the benefits of, TU Credit Monitoring without cost or obligation. 200.

These representations were false because, in truth and in fact, the consumers were not yet signed up for or entitled to the benefits of TU Credit Monitoring. c. Deceptive Acts and Practices in Connection with Enrollment Processes 201.

Corporate Defendants’ representations in connection with the TU Credit Monitoring enrollment process, made from the Effective Date through the present, have been deceptive.

202.

As set forth in Paragraphs 78–91 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that they are requesting consumers’ debit or credit card information for reasons other than to charge the consumer. 203.

These representations were false because, in truth and in fact, Corporate Defendants requested consumers’ payment information in order to charge consumers, and consumers who provided debit or credit card information were immediately charged for the TU Credit Monitoring product.

d. Deceptive Acts and Practices Regarding the Nature of the Credit Score Offered Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 45 of 55 PageID #:922

Page 153

204.

Corporate Defendants’ representations regarding the nature of the credit scores it offered or provided to consumers, made from the Effective Date through the present, have been deceptive.

205.

As described in Paragraphs 56–77 of this Complaint, Corporate Defendants have represented, directly or indirectly, expressly or impliedly, that the VantageScore credit scores Corporate Defendants offer or provide to consumers may be the same scores typically used by lenders or other commercial users for credit decisions. 206.

The representations are unsubstantiated and, therefore, deceptive because Corporate Defendants lack a reasonable basis to assert that a consumer’s lender would use the VantageScore, instead of any other of the hundreds of available credit score models. e. Deceptive Acts and Practices Regarding “Free” or “$1” Credit Scores and Reports 207.

Corporate Defendants’ representations regarding “free” and “$1” scores and reports, made from the Effective Date through the present, have been deceptive. 208.

As described in Paragraphs 92–109 of this Complaint, Corporate Defendants represented, directly or indirectly, expressly or impliedly, that consumers could obtain a “free” or “$1” score or report in its advertisements for TU Credit Monitoring. 209.

These representations were false because, in fact, these advertisements were associated with a Negative Option billing structure and a trial offer for a subscription. Consumers who did not cancel their subscriptions were immediately enrolled in an indefinite paid monthly subscription for TU Credit Monitoring.

f. Deceptive Acts and Practices in Connection with Marketing on annualcreditreport.com 210.

Corporate Defendants’ marketing of Credit-Related Products on the website annualcreditreport.com was deceptive.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 46 of 55 PageID #:923

Page 154

211.

As described in Paragraphs 124–137 of this Complaint, Corporate Defendants have represented directly or indirectly, expressly or impliedly, that consumers’ credit scores were free as a part of their free annual file disclosure.

212.

These representations were false because, in truth and in fact, Corporate Defendants did not offer consumers free credit scores in connection with their annual file disclosures, but instead enrolled consumers into an indefinite paid monthly subscription product that included a credit score.

g. Deceptive Acts and Practices Regarding Effect of Cancelling TU Credit Monitoring Subscriptions 213.

As set forth in Paragraphs 138–155 of this Complaint, Corporate Defendants have represented, directly and indirectly, expressly or impliedly, that consumers have publicly exposed their credit report information by cancelling their subscriptions to TU Credit Monitoring and that re-enrolling in the product is the only way they can protect their credit report information. 214.

These representations were false because the cancellation of a TU Credit Monitoring subscription does not cause the consumer’s credit report information to become publicly exposed, and a free security freeze would provide the same security features as the Credit Lock option included in the TU Credit Monitoring subscription. * * * 215.

The misrepresentations cited in paragraphs 191–214 were material and likely to mislead consumers acting reasonably under the circumstances. 216.

Thus, Corporate Defendants engaged in deceptive acts and practices in violation of §§ 1031(a) and 1036(a)(1)(B) of the CFPA. 12 U.S.C. §§ 5531(a), 5536(a)(1)(B). 217.

Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents of one another. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 47 of 55 PageID #:924

Page 155

COUNT IV: SUBSTANTIAL ASSISTANCE (TRANSUNION) 218.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–180; and 191–217 of this Complaint.

219.

Under § 1036(a)(3) of the CFPA, it is unlawful for “any person to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the provisions of section 1031, or any rule or order issued thereunder, and notwithstanding any provision of this title, the provider of such substantial assistance shall be deemed to be in violation of that section to the same extent as the person to whom such assistance is provided.” 12 U.S.C. § 5536(a)(3).

220.

The Order is an “order issued” under section 1031 of the CFPA. 221.

TULLC and TUI are each “a covered person or service provider.” 222.

As described in Counts I and III, TUI violated § 1031 of the CFPA. 223.

As described in Counts I and III, TULLC violated § 1031 of the CFPA. 224.

Through its governance and other support of TULLC and TUI, and through its common enterprise activities with them, TransUnion has associated itself with their venture and has participated in their marketing efforts as something that it wished to bring about and has sought by its actions to make succeed.

225.

As a party to the Order with actual knowledge of the Order’s requirements, as the entity with ultimate responsibility to ensure TULLC and TUI complied with the Order, and through its governance and common enterprise activities with TULLC and TUI, TransUnion knew about or was reckless with respect to the conduct detailed in Count I and Count III. 226.

TransUnion violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TULLC and TUI in connection with their violations of § 1031 of the CFPA. 12 U.S.C. § 5536(a)(3).

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 48 of 55 PageID #:925

Page 156

227.

TransUnion violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TULLC and TUI in connection with their violations of the Order. 12 U.S.C. § 5536(a)(3).

COUNT V: SUBSTANTIAL ASSISTANCE (TULLC) 228.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–180; and 191–217 of this Complaint.

229.

Under § 1036(a)(3) of the CFPA, it is unlawful for “any person to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the provisions of section 1031, or any rule or order issued thereunder, and notwithstanding any provision of this title, the provider of such substantial assistance shall be deemed to be in violation of that section to the same extent as the person to whom such assistance is provided.” 12 U.S.C. § 5536(a)(3).

230.

The Order is an “order issued” under section 1031 of the CFPA. 231.

TUI is “a covered person or service provider.”

232.

As described in Counts I and III, TUI violated § 1031 of the CFPA. 233.

Through its governance and other support and common enterprise activities with TUI, which include TULLC’s ability, as an NCRA, to advertise to consumers on annualcreditreport.com, and its collection and maintenance of shared consumer financial data, creation of consumer reports, and creation of other products for use by consumers, TULLC has associated itself with TUI’s venture and has participated in its marketing efforts as something that it wished to bring about, and has sought by its actions to make succeed. 234.

As a party to the Order with actual knowledge of its content and through its common enterprise activities with TUI, TULLC knew about or was reckless with respect to the conduct detailed in Count I and Count III.

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 49 of 55 PageID #:926

Page 157

235.

TULLC violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TUI in violation of § 1031 of the CFPA. 12 U.S.C. § 5536(a)(3). 236.

TULLC violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TUI in connection with its violations of the Order. 12 U.S.C. § 5536(a)(3). COUNT VI: SUBSTANTIAL ASSISTANCE (DANAHER) 237.

The Bureau incorporates the allegations set forth in Paragraphs 1–109; 124–177(g), and 178–180 of this Complaint.

238.

Under § 1036(a)(3) of the CFPA, it is unlawful for “any person to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the provisions of section 1031, or any rule or order issued thereunder, and notwithstanding any provision of this title, the provider of such substantial assistance shall be deemed to be in violation of that section to the same extent as the person to whom such assistance is provided.” 12 U.S.C. § 5536(a)(3).

239.

The Order is an “order issued” under section 1031 of the CFPA. 240.

TUI is “a covered person or service provider.”

241.

As described in Count I, TUI violated § 1031 of the CFPA. 242.

Through his leadership of TUI as its President from the Order’s Effective Date until April 1, 2021, and as Executive Vice President of TUI from April 2, 2021 until at least February 1, 2022, Danaher associated himself with TUI’s venture and participated in TUI’s marketing efforts as something that he wished to bring about, and sought by his actions to make succeed. 243.

As a person with actual knowledge of the Order, Danaher knew about or was reckless with respect to the conduct detailed in Count I, Paragraphs 173–177(g) and 178–180. 244.

Danaher violated § 1036(a)(3) of the CFPA by knowingly or recklessly providing substantial assistance to TUI in connection with its violations of the Order. 12 U.S.C. § 5536(a)(3). Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 50 of 55 PageID #:927

Page 158

COUNT VII: VIOLATION OF EFTA AND REGULATION E (CORPORATE DEFENDANTS) 245.

The Bureau incorporates the allegations set forth in Paragraphs 1–22 and 78–123 of this Complaint.

246.

Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), requires that a “preauthorized” electronic fund transfer from a consumer’s account must be “authorized by the consumer only in writing, and a copy of such authorization shall be provided to the consumer when made.” 247.

Section 903(10) of EFTA, 15 U.S.C. § 1693a(10), provides that the term “preauthorized electronic fund transfer” means “an electronic fund transfer authorized in advance to recur at substantially regular intervals.”

248.

Section 1005.3 of Regulation E, entitled “Coverage,” states: “For purposes of §…1005.10(b)…, this part applies to any person, other than a person excluded from coverage of this part by section 1029 of the [CFPA].” 12 C.F.R. § 1005.3(a). 249.

Section 1005.10(b) of Regulation E provides that “[p]reauthorized electronic fund transfers from a consumer’s account may be authorized only by a writing signed or similarly authenticated by the consumer. The person that obtains the authorization shall provide a copy to the consumer.” 12 C.F.R. § 1005.10(b).

250.

Section 1005.10 of the Official Interpretations to Regulation E clarify that “[t]he authorization process should evidence the consumer’s identity and assent to the authorization.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 5. The Official Interpretations further clarify that “[a]n authorization is valid if it is readily identifiable as such and the terms of the preauthorized transfer are clear and readily understandable.” 12 C.F.R. part 1005, Supp. I., Sec. 1005.10, 10(b), cmt. 6.

251.

Corporate Defendants are each a “person” within the meaning of Section 1005.3 of Regulation E, and not excluded from the Bureau’s authority under Section 1029 of the CFPA. Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 51 of 55 PageID #:928

Page 159

Corporate Defendants’ monthly charge for TU Credit Monitoring is a “preauthorized electronic fund transfer” within the meaning of EFTA and Regulation E. 252.

Corporate Defendants’ enrollment forms, including the Homepage Enrollment Form and the Affiliate Enrollment Forms, do not convey the terms of the preauthorized transfer in a clear and readily understandable way.

253.

In numerous instances, Corporate Defendants have debited consumers’ bank accounts on a recurring basis without obtaining a written authorization signed or similarly authenticated from consumers for preauthorized electronic fund transfers from their accounts, thereby violating Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), and Section 1005.10(b) of Regulation E, 12 C.F.R. § 1005.10(b). Thus, Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another.

254.

Further, in numerous instances, Corporate Defendants have debited consumers’ bank accounts on a recurring basis without providing a copy of written authorization signed or similarly authenticated by the consumer for preauthorized electronic fund transfers from the consumer’s account, thereby violating Section 907(a) of EFTA, 15 U.S.C. § 1693e(a), and Section 1005.10(b) of Regulation E, 12 C.F.R. § 1005.10(b). Thus, Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another.

COUNT VIII: VIOLATION OF REGULATION V (CORPORATE DEFENDANTS) 255.

The Bureau incorporates the allegations set forth in Paragraphs 1–22; 32–44; and 124–137 of this Complaint.

256.

Under Regulation V, any communications, instructions, or permitted advertising or marketing on annualcreditreport.com must not “interfere with, detract from, contradict, or otherwise undermine the purpose” of the site, which is “to enable consumers to make a single Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 52 of 55 PageID #:929

Page 160

request to obtain annual file disclosures from” the NCRAs, including Corporate Defendants. 12 C.F.R. §§ 1022.136(a), (g).

257.

Examples of interfering, detracting, inconsistent or undermining communications include “materials that falsely represent, expressly or by implication, that a product or service offered ancillary to receipt of a file disclosure, such as a credit score or credit monitoring service, is free[.]” 12 C.F.R. § 1022.136(g)(3)(iii).

258.

Corporate Defendants placed or caused to be placed advertisements on consumers’ free file disclosures in a manner that interfered with, detracted from, contradicted, and undermined the purpose of annualcreditreport.com by falsely representing, expressly or by implication, that consumers’ credit scores were part of their free annual file disclosure and by diverting consumers from their annual file disclosure into paid subscription products. 259.

Thus, Corporate Defendants’ advertisements on annualcreditreport.com violated Regulation V, 12 C.F.R. § 1022.136(g), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise, and as principals or agents for one another.

COUNT IX: VIOLATIONS OF THE CFPA BASED ON VIOLATIONS OF REGULATION V, EFTA, AND REGULATION E (CORPORATE DEFENDANTS) 260.

The Bureau incorporates the allegations set forth in Paragraphs 1–22; 32–44; 78– 137; and 245–259 of this Complaint.

261.

The CFPA defines “Federal consumer financial law” to include most provisions of the FCRA and its implementing regulation, Regulation V, including those cited in Count VII, and EFTA and its implementing regulation, Regulation E, including those cited in Count VI. 12 U.S.C. §§ 5481(12)(C), (F), (14).

262.

TransUnion, TULLC, and TUI are covered persons under the CFPA. 12 U.S.C. § 5481(6).

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 53 of 55 PageID #:930

Page 161

263.

Under the CFPA, a covered person’s violation of a Federal consumer financial law, which includes the enumerated consumer laws and rules thereunder, violates the CFPA. 12 U.S.C. §§ 5536(a)(1)(A), 5481(14).

264.

Corporate Defendants’ violations of Regulation V, described in Count VII, are violations of § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise and as principals or agents for one another.

265.

Corporate Defendants’ violations of EFTA and Regulation E, described in Count VI, are violations of § 1036(a)(1)(A) of the CFPA, 12 U.S.C. § 5536(a)(1)(A), and Corporate Defendants are each liable for these violations directly, through the TU Common Enterprise and as principals or agents for one another.

DEMAND FOR RELIEF Accordingly, the Bureau requests that the Court: 1.

permanently enjoin all Defendants from committing future violations of the CFPA, EFTA, Regulation E, Regulation V, or any provision of “Federal consumer financial law,” as defined by 12 U.S.C. § 5481(14);

2.

grant additional injunctive relief against each of the Defendants as the Court deems just and proper;

3.

award damages or other monetary relief against Defendants, jointly and severally;

4.

order Defendants, jointly and severally, to refund money to consumers; 5.

order Defendants, jointly and severally, to pay restitution to consumers harmed by Defendants’ unlawful conduct;

6.

order each Defendant to pay disgorgement or compensation for unjust enrichment;

7.

impose on Defendants civil money penalties under 12 U.S.C. § 5565(c); Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 54 of 55 PageID #:931

Page 162

8.

order Defendants, jointly and severally, to pay the Bureau’s costs incurred in connection with prosecuting this action; and 9.

award additional relief as this Court deems just and proper.

Dated: May 24, 2023

Respectfully submitted,

Eric Halperin Enforcement Director

David M. Rubenstein Deputy Enforcement Director

Cynthia Gooen Lesser Assistant Deputy Enforcement Director

s/ Jessica Rank Divine___________ Jessica Rank Divine Tracy L. Hilmer Mary K. Warren Enforcement Attorneys

Consumer Financial Protection Bureau 1700 G Street, NW Washington, DC 20552 Telephone: (202) 435-7863 (Divine) Telephone: (202) 435-7459 (Hilmer) Telephone: (202) 435-7815 (Warren) Email: [email protected] Email: [email protected] Email: [email protected]

Attorneys for Plaintiff Consumer Financial Protection Bureau

Case: 1:22-cv-01880 Document #: 99 Filed: 05/24/23 Page 55 of 55 PageID #:932

Page 163

APPENDIX A Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 1 of 32 PageID #:933

Page 164

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU ADMINISTRATIVE PROCEEDING File No. 201 -CFPB- In the Matter of:

CONSENT ORDER TransUnion Interactive, Inc., Trans Union, LLC, and TransUnion The Consumer Financial Protection Bureau (Bureau) has reviewed the marketing practices of TransUnion Interactive, Inc. (TUI), Trans Union, LLC (TULLC), and TransUnion (TU) (collectively Respondents, as defined below) and has identified the following law violations: (1) Respondents deceptively market credit scores to consumers by falsely representing, in violation of the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5531, 5536, that the scores they market and sell to consumers are the same scores lenders typically use to determine creditworthiness; and (2) Respondents deceptively market credit scores and creditrelated products to consumers by falsely representing, in violation of the CFPA, that the scores and products are “free” or “$1”, when, in reality, when a consumer signs up for a “free” or “$1” trial, she is automatically enrolled in a subscription program for which she is charged a recurring monthly fee unless she cancels. Under Sections 1053 and 1055 of the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5563, 5565, the Bureau issues this Consent Order (Consent Order). 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 1 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 2 of 32 PageID #:934

Page 165

I Jurisdiction 1.

The Bureau has jurisdiction over this matter under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563 and 5565.

II Stipulation 2.

Respondents have executed a “Stipulation and Consent to the Issuance of a Consent Order,” dated December 22, 2016 (Stipulation), which is incorporated by reference and is accepted by the Bureau. By this Stipulation, Respondents have consented to the issuance of this Consent Order by the Bureau under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563 and 5565, without admitting or denying the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over Respondents and the subject matter of this action.

III Definitions 3.

The following definitions apply to this Consent Order: a. “Affected Consumers” are the approximately 700,000 consumers identified by the Bureau and Respondents who were enrolled in the TUCM Product through a Negative Option offer during the Relevant Period, and then cancelled their subscriptions within two billing cycles of enrollment without receiving a refund of fees paid.

b. “Board” means TU’s duly-elected and acting Board of Directors. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 2 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 3 of 32 PageID #:935

Page 166

c. “Clearly and prominently” means “clearly and conspicuously” such that the required disclosure is difficult to miss (i.e., easily noticeable) and easily understandable by ordinary consumers, including in all the following ways: i.

In textual communications (e.g., printed publications or words displayed on the screen of an electronic device for which the communication was designed), the disclosure must be of a type size and location sufficiently noticeable for an ordinary consumer to read and comprehend, in print that contrasts with the background on which it appears; ii.

In communications disseminated orally or through audible means (e.g., radio or streaming audio), the disclosure must be delivered in a volume, speed, and cadence sufficient for an ordinary consumer to hear and comprehend it;

iii.

In communications disseminated through video means (e.g., television or streaming video), the disclosure must be in writing in a form consistent with subsection (i), and must appear on the screen for a duration sufficient for an ordinary consumer to read and comprehend it; iv.

In communications made through interactive media such as the internet, online services, and software, the disclosure must be unavoidable and presented in a form consistent with subsection (i); a disclosure is not Clear and Conspicuous if a consumer must take any action, such as clicking on a hyperlink or hovering over an icon, to see it; v.

In communications that contain both audio and visual portions, the disclosure must be presented simultaneously in both the audio and visual portions of the communication;

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 3 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 4 of 32 PageID #:936

Page 167

vi.

In all instances, the disclosure must be presented before the consumer incurs any financial obligation, and use diction and syntax that is understandable to a reasonable consumer in each language in which the representation that requires the disclosure appears; and vii.

The disclosure must not be contradicted or mitigated by, or inconsistent with, anything else in the communication with the consumer. d. “Consumer Reporting Agency” or “CRA” means a “consumer reporting agency,” as that term is defined in section 603(f) of the FCRA, 15 U.S.C. § 1681a(f). e. “Consumer Reports” means a “consumer report,” as that term is defined in section 603(d) of the FCRA, 15 U.S.C. § 1681a(d). f.

“Credit-Related Products” means any product or service Respondents offer for sale directly to consumers, including but not limited to the TUCM Product, credit scores, credit reports, credit monitoring, or identity theft insurance or protection.

g. “Consumer Complaint” means any expression of dissatisfaction by a consumer regarding Credit-Related Products.

h. “Effective Date” means the date on which the Consent Order is issued. i.

“Enforcement Director” means the Assistant Director of the Office of Enforcement for the Consumer Financial Protection Bureau, or his/her delegate.

j.

“Negative Option” means a category of commercial transactions in which a seller markets an offer for a trial period and the seller then interprets a customer’s failure to take an affirmative action, either to reject an offer or 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 4 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 5 of 32 PageID #:937

Page 168

cancel an agreement, as assent or continuing assent to be charged for goods or services.

k. “Assistant Deputy for Consumer Reporting” means the Assistant Deputy for Consumer Reporting for the Office of Supervision for the Consumer Financial Protection Bureau, or his/her delegate.

l.

“Related Consumer Action” means a private action by or on behalf of one or more consumers or an enforcement action by another governmental agency brought against Respondents based on substantially the same facts as described in Section IV of this Consent Order.

m. “Relevant Period” includes the period from July 21, 2011 until the Effective Date.

n. “Respondents” means TransUnion Interactive, Inc., TransUnion, LLC, TransUnion, and their successors and assigns. o. “TransUnion Credit Monitoring Product” or “TUCM Product” means the TransUnion Credit Monitoring bundled product that includes, among other things, a VantageScore credit score, credit report, and monthly subscriptionbased credit monitoring product, which was offered by TUI during the Relevant Period on a “free” or “$1” trial basis.

IV Bureau Findings and Conclusions The Bureau finds the following:

4.

TransUnion Interactive, Inc. (TUI), headquartered in Chicago, Illinois, is a whollyowned subsidiary of TransUnion, LLC (TULLC), a limited liability company and 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 5 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 6 of 32 PageID #:938

Page 169

Delaware corporation. TransUnion (TU) is a non-operating holding company that is the ultimate parent company of TUI and TULLC. 5.

TUI, TULLC, and TU are each a “covered person” as that term is defined by the CFPA, 12 U.S.C. § 5481(6).

6.

TULLC is a Consumer Reporting Agency and compiles and maintains financial, consumer, and commercial data across the nation and worldwide. 7.

TULLC uses credit information it has collected in consumer credit files to generate Consumer Reports. TULLC markets, sells, and provides Consumer Reports to commercial users, such as lenders, insurance companies, and potential employers. 8.

TUI generates, markets, and sells Credit-Related Products, such as credit scores, credit reports, and credit monitoring, directly to consumers using credit information from Consumer Reporting Agencies.

9.

During the Relevant Period, TUI has marketed and sold Credit-Related Products – including the TUCM Product – to consumers in various combinations. Consumers can purchase these products from TUI through a one-time transaction or through a subscription where the consumer pays a monthly fee to have continuous access to the product for as long as the consumer is enrolled in the subscription. 10.

During the Relevant Period, TUI has marketed and sold Credit-Related Products to consumers through a variety of online channels. This includes banner and display advertisements that appear on TU’s main website (TransUnion.com) and on popular websites such as auto.com, bankrate.com, Google, and Amazon; direct emails to certain consumers; and advertisements on TUI’s marketing affiliate websites.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 6 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 7 of 32 PageID #:939

Page 170

Findings and Conclusions as to Misrepresentations Relating to Credit Scores 11.

Credit scores are, among other things, numerical summaries designed to predict consumer payment behavior on a wide range of credit products. Many lenders and other commercial users rely, in part, on consumers’ credit scores when deciding whether to extend credit to a consumer.

12.

No single credit score or credit score model serves as the primary credit score for the marketplace. Lenders use a variety of credit scores, which vary by score provider, scoring model, and target industry.

13.

CRAs like TULLC, and other companies, apply various analytical scoring models to the information in consumer credit files to produce the credit scores that lenders and commercial users rely upon.

14.

Respondents generate a credit score based on a scoring model that is different from the credit score models most often used by lenders. It is based on a model from VantageScore Solutions, LLC, which has offered three versions of its score since 2011. Respondents refer to this score as the TransUnion VantageScore. 15.

TULLC has marketed the TransUnion VantageScore to lenders and other commercial users. The vast majority of credit decisions made by lenders, however, are not based on VantageScore credit scores.

16.

In addition to selling credit scores to lenders and other commercial users, the TransUnion VantageScore credit scores are marketed and sold to consumers as a part of its TUCM Product bundle.

17.

Some of the online advertisements for the TUCM Product represent to consumers that the VantageScore consumers are purchasing is the same score used by lenders 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 7 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 8 of 32 PageID #:940

Page 171

or other commercial users to determine creditworthiness. In reality, the credit score model used by any individual lender or other commercial user is highly unlikely to be the TransUnion VantageScore.

18.

For example, one such advertisement stated, “Make sure you know your Credit Score when looking for a car. Lenders typically will check your credit before buying and financing a car.” Another advertisement stated, “Make sure you know your Credit Score when looking for an apartment. Landlords may check your credit.” 19.

These advertisements implicitly represent that the VantageScore credit score that Respondents offer is the same score that “lenders” or “landlords” typically use to determine creditworthiness.

20.

Consumers who click on these advertisements are directed to landing pages, which usually contain additional claims, such as “With a good credit score, you may pay less with lower interest rates on mortgages, auto loans and credit cards.” 21.

Consumers are then directed through a series of enrollment pages where they enter personal information, including their credit card numbers, to obtain the TUCM Product, which includes the VantageScore credit score bundled with a subscription -based credit monitoring service and a credit report. 22.

There is no way for Respondents or a consumer to know which credit score model or particular credit score a lender may rely upon when making a credit decision related to that consumer.

23.

In many cases, there are significant and meaningful differences between the VantageScore credit scores marketed and sold to consumers and the variety of credit scores used by lenders.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 8 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 9 of 32 PageID #:941

Page 172

24.

As a result, the scores marketed and sold to consumers often present an inaccurate picture of how lenders, the vast majority of which use other scores and data providers, assess consumer creditworthiness.

25.

In some instances, the advertisements contain disclosures, but they fail to adequately disclose that the VantageScore credit scores they are selling to consumers are not the scores lenders typically use. 26.

A significant number of the advertisements fail to include on the first web page viewed by consumers any disclosures about the nature of the credit scores it offers. Rather, the first time any disclosure appears is on the landing page, which the consumer accesses by clicking on a link in the initial advertisement. 27.

The disclosure, however, is not clear and conspicuous or easy to understand. Rather, the disclosure, which states “Lenders use many different credit scoring models. The score you get from us may not be the one your lender uses[,]” is typically buried at the bottom of the advertisement in fine print, far removed from the claims the disclosure was intended to modify; or depending on the advertising channel through which the consumers accesses the TUCM Product, does not appear until the first or second step of the order pages. 28.

Section 1036(a)(1)(B) of the CFPA prohibits “unfair, deceptive, or abusive” acts or practices. 12 U.S.C. § 5536(a)(1)(B).

29.

As described in Paragraphs 4 through 27, in connection with the advertising, marketing, promoting, offering for sale, or sale of the TUCM Product, Respondents have represented, directly or indirectly, expressly or impliedly, that the credit scores they market and sell to consumers are the same scores typically used by lenders or other commercial users for credit decisions. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 9 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 10 of 32 PageID #:942

Page 173

30.

In fact, the credit scores Respondents market and sell to consumers are not the same scores typically used by lenders or other commercial users for credit decisions.

31.

Thus, Respondents’ representations, as described in Paragraphs 4 through 27, are false or misleading and constitute deceptive acts or practices in violation of sections 1031(a) and 1036(a)(1)(B) of the CFPA, 12 U.S.C. §§ 5531(a), 5536(a)(1)(B).

Findings and Conclusions as to Misrepresentations Related to the “Free” or “$1” TUCM Product 32.

During the Relevant Period the vast majority of the online advertisements also misrepresented to consumers that they could have access to “free” credit scores and “$1” credit reports.

33.

The advertisements routinely stated: “You’re Seconds Away From Your FREE Credit Score”; “See your FREE credit score”; and “Free Credit Score and $1 Report.”

34.

In fact, these promotions included a Negative Option billing structure: Consumers who signed up for the TUCM Product to obtain their “free” scores and “free” or “$1” reports received a bundled product that included a seven-day free trial of a credit monitoring service. After that seven-day period, consumers who did not cancel their subscription were automatically enrolled in the monthly subscription-based credit monitoring service that usually cost $16.99 per month. TUI charged each consumer this recurring membership fee automatically each month until the consumer cancelled.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 10 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 11 of 32 PageID #:943

Page 174

35.

TUI’s advertisements offering “free” or “$1” TUCM Products failed to adequately disclose the Negative Option feature of the product. 36.

The disclosure in the advertisements was neither clear nor conspicuous. In contrast to the bold, colorful headlines that touted the free scores and products, the disclosure was often displayed in fine print, in low contrast, and was generally placed in a less prominent location, such as the bottom of the webpage, grouped with other disclosures.

37.

In some instances, consumers did not know they had been automatically enrolled in a Negative Option subscription plan for the TUCM Product until they discovered a charge – usually of $16.99 per month – on their bank or credit card statement. 38.

Section 1036(a)(1)(B) of the CFPA prohibits “unfair, deceptive, or abusive” acts or practices. 12 U.S.C. § 5536(a)(1)(B). As described in Paragraphs 32 through 37, in connection with the advertising, marketing, promotion, offering for sale, or sale of the TUCM Product, Respondents have represented, directly or indirectly, expressly or impliedly, that consumers could obtain their credit score or credit report for free or for a $1 fee.

39.

In fact, many consumers do not receive their credit score or credit report for free or for a $1 fee. Instead, Respondents’ offer, which is described in a disclosure that is neither clear nor conspicuous, is a Negative Option whereby consumers enroll in a subscription plan that involves a monthly fee unless they cancel during the trial period. Therefore, Respondents engaged in deceptive acts or practices in violation of sections 1031(a) and 1036(a)(1)(B) of the CFPA, 12 U.S.C. §§ 5531(a), 5536(a)(1)(B).

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 11 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 12 of 32 PageID #:944

Page 175

ORDER V Conduct Provisions IT IS ORDERED, under sections 1053 and 1055 of the CFPA, that: 40.

Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, may not violate sections 1031 and 1036 of the CFPA, 12 U.S.C. §§ 5531 and 5536 as follows, and must take the following affirmative actions: a. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, in connection with the advertising, marketing, promotion, offering for sale, sale, or performance of Credit-Related Products, may not misrepresent, or assist others in misrepresenting, expressly or impliedly: i.

Any material fact about the cost or price of a Credit-Related Product, including that the product or service is free, discounted, a gift, a sample, a trial, a bonus, without cost or obligation, or words of similar import, denoting or implying the absence of an obligation on the part of the consumer to affirmatively act in order to avoid charges; ii.

Any material fact about the timing or manner of any charge or bill, including the frequency or recurrence of any charge or bill, the purpose for which a consumer’s credit card or payment information will be used, the length of subscription, if applicable, the date(s) upon which the consumer will be charged or billed, and the deadline (by date or frequency) by which the consumer must act in order to stop any charges; or 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 12 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 13 of 32 PageID #:945

Page 176

Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 14 of 32 PagelD #:946

i.

2017-CFPB-0002 Document1 Filed 01/03/2017 Page 13 of 31

Any >ther fact material to :onsumers, such asa _ y material restrictions, limitations, or conditions of the prod ict or servize, or any naterial aspect

of its performance, efficacy, nature, or central c aracteristics.

b. Respondents, their officers, age its, servants, employ :es, and attorneys wh »)

have actu u notice of this Conse 1t Order, hether act ng directly or indirectly,

in connec ion with t e advertising, marketing, promotion, offering for sale, sale,

or perfor 1ance of any Credit-Related Pro uct:

1.

Before enrolling any consumer in a Credit-Related Product with a Negative Option feature, Respondents must obtain the ex oress informed conse 1t from the consumer, which consists of:

1. For all Int :rnet offers: a check b x on the final order page that consumers must affir natively c .eck to select the Negative Optio 1 feature (i.e., it cannot be pre-checked), and which clearly and conspicuo tsly states that the co isumer agrees to be b Iled for the product u less the consumer cancels before the trial period expires;

2. Immediately adjacent to the affi mative sel action checkbox, Responde its must clearly and conspicuously disclose: (i) if applicable, the amou it the cons 1mer will be charged »n a recurr ng (e.g., monthly) basis if the product or servi :e is not ca acelled bef sre the expiration of the trial period; and (ii) the date when the trial period expires and the amount t 1e consum=2r will be billed; and

3. The disclosure must not contain any infor :ation related to the

benefits of the produ t.

Page 177

ii.

Within a reasonable time period after the Effective Date as set forth in the Compliance Plan, must provide a simple mechanism for a consumer to immediately cancel the purchase of any Credit-Related Product, and stop billing and collecting payments for any recurring charge for any good or service. The mechanism must not be difficult, costly, confusing, or time consuming, and must, at a minimum, be substantially similar to the mechanism(s) the consumer used to initiate the purchase of any Credit- Related Product;

iii.

For all oral offers for a Credit-Related Product, in addition to disclosing the information identified in Subsections (a)(i)-(iii), and prior to obtaining any billing information from a consumer, obtain affirmative and unambiguous oral confirmation that the consumer: 1.

Consents to authorizing payment for such goods or services; and 2.

Understands the specific steps the consumer must take to prevent further charges.

c. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, in connection with the advertising, marketing, promotion, offering for sale, sale, or performance of Credit-Related Products, including through textual, oral or audible communications, or communications disseminated through audible means or interactive media including, but not limited to, internet advertisement, must take the following actions when offering or providing a VantageScore credit score to consumers:

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 14 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 15 of 32 PageID #:947

Page 178

i.

Clearly and prominently disclose the nature of the credit score offered in each communication containing the offer and, for internet offers, on at least one page of the order process.

ii.

Ensure that the disclosure clearly and prominently discloses or substantially states the following:

1.

Like other credit scores offered to consumers, the credit score Respondent is selling is not likely to be the same score used by lenders or other commercial users for credit decisions; and 2.

There are various types of credit scores, and lenders use a variety of different types of credit scores to make lending decisions; iii.

For written communications, including for internet offers, ensure that the disclosure contains a label in font size double that of the disclosure that says: “What You Need to Know.”

d. Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, must take the following actions:

i.

Further develop and implement comprehensive policies and procedures for improving communication with consumers regarding Credit-Related Products, including, but not limited to, communications about the nature of the credit score, pricing structure, , and any other material terms, including:

1.

Regularly collecting, reviewing, and assessing key performance metrics, such as Consumer Complaints (both those it receives directly as well as those it receives through other channels such as the CFPB 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 15 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 16 of 32 PageID #:948

Page 179

and State Attorneys General Offices, among other complaint avenues) and cancellation rates, for evidence of consumer confusion regarding the products and services it offers to consumers; 2.

Regularly collecting, reviewing, and assessing empirical data regarding consumer perceptions of Respondents’ advertising with regard to the nature of the credit score, the pricing structure, the effective cost of the product or service, and any other material terms; and 3.

Regularly reviewing and assessing advertisements to determine what modifications, if any, need to be made to the advertisements to improve consumer understanding of Credit-Related Products in light of empirical evidence.

VI Compliance Plan IT IS FURTHER ORDERED that:

41.

Within 90 days of the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting for review and determination of non-objection a comprehensive compliance plan designed to ensure that Respondents’ advertising practices comply with all applicable Federal consumer financial laws and the terms of this Consent Order (Compliance Plan). The Compliance Plan must include, at a minimum:

a. Detailed steps for addressing each action required by Section V of this Consent Order; and 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 16 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 17 of 32 PageID #:949

Page 180

b. Specific timeframes and deadlines for implementation of the steps described above.

42.

The Assistant Deputy for Consumer Reporting will have the discretion to make a determination of non-objection to the Compliance Plan or direct Respondents to revise it. If the Assistant Deputy for Consumer Reporting directs Respondents to revise the Compliance Plan, the Respondents must make the revisions and resubmit the Compliance Plan to the Assistant Deputy for Consumer Reporting within 30 days.

43.

After receiving notification that the Assistant Deputy for Consumer Reporting has made a determination of non-objection to the Compliance Plan, Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the Compliance Plan.

VII Role of the Board IT IS FURTHER ORDERED that:

44.

The Board, or a duly authorized committee thereof, must review all submissions (including plans, reports, programs, policies, and procedures) required by this Consent Order prior to submission to the Bureau.

45.

Although this Consent Order requires Respondents to submit certain documents for the review or non-objection by the Assistant Deputy for Consumer Reporting, the Board will have the ultimate responsibility for proper and sound management of Respondents and for ensuring that Respondents comply with Federal consumer financial law and this Consent Order.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 17 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 18 of 32 PageID #:950

Page 181

46.

In each instance that this Consent Order requires the Board to ensure adherence to, or perform certain obligations of Respondents, the Board, or a duly authorized committee thereof, must:

a. Authorize whatever actions are necessary for Respondents to fully comply with the Consent Order;

b. Require timely reporting by management to the Board, or a duly authorized committee thereof, on the status of compliance obligations; and c. Require timely and appropriate corrective action to remedy any material noncompliance with any failures to comply with Board directives related to this Section.

VIII Order to Pay Redress IT IS FURTHER ORDERED that:

47.

Within 10 days of the Effective Date, Respondents must reserve or deposit into a segregated deposit account $13,930,000 for the purpose of providing redress to Affected Consumers.

48.

Within 90 days of the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting for review and non-objection a comprehensive written plan for providing redress consistent with this Consent Order (Redress Plan). The Assistant Deputy for Consumer Reporting will have the discretion to make a determination of non-objection to the Redress Plan or direct Respondents to revise it. If the Assistant Deputy for Consumer Reporting directs Respondents to revise the Redress Plan, Respondents must make the revisions and resubmit the Redress Plan to the Assistant Deputy for Consumer Reporting within 30 days. After 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 18 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 19 of 32 PageID #:951

Page 182

receiving notification that the Assistant Deputy for Consumer Reporting has made a determination of non-objection to the Redress Plan, Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the Redress Plan.

49.

The Redress Plan must:

a. Include a detailed description of the methodology used to determine the population of Affected Consumers and the appropriate redress for each Affected Consumer, the manner and form in which redress payments will be distributed to Affected Consumers, and procedures to issue and track redress payments; Provide that Respondent shall pay all costs associated with administering redress and remediation as required by this section; b. Include the form of the letters (“Notification Letters”) and envelopes to be sent notifying consumers of the redress payments and a description of the process for sending the Notification Letters to consumers. Respondent must not include in any envelope containing a Notification Letter any materials other than the approved letter and redress checks.

c. Require Respondent to make reasonable attempts to obtain a current address for any consumer whose Notification Letter is returned for any reason, using at least the National Change of Address System, and to promptly re-mail all returned letters to current addresses. If a redress check for any consumer is returned to Respondent after such second mailing, or if a current mailing address cannot be identified using the National Change of Address System, Respondents must retain the redress amount of such consumer for a period of one hundred and eighty (180) days from the date the check was originally 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 19 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 20 of 32 PageID #:952

Page 183

mailed, during which period such amount may be claimed by such consumer upon appropriate proof of identity.

d. Require Respondents to submit a Redress Plan Report to the Assistant Deputy for Consumer Reporting with 90 days of completion of the Redress Plan. The Redress Plan Report must include an audit and assessment of Respondents’ compliance with the terms of the Redress Plan.

50.

After completing the Redress Plan, if the amount of the redress provided to Affected Consumers is less than $13,930,000 within 30 days of the completion of the Redress Plan, Respondents must pay the Bureau, by wire transfer to the Bureau or to the Bureau’s agent, and according to the Bureau’s wiring instructions, the difference between the amount of redress provided to Affected Consumers and $13,930,000, so that such funds may be distributed to the U.S. Treasury as disgorgement.

51.

Respondents may not condition the provision of any redress to any Affected Consumer under this Order on that Affected Consumer waiving any right. IX Order to Pay Civil Money Penalties IT IS FURTHER ORDERED that:

52.

Under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c), by reason of the violations of law described in Section IV of this Consent Order, and taking into account the factors in 12 U.S.C. § 5565(c)(3), Respondents must pay a civil money penalty of $3,000,000 to the Bureau.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 20 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 21 of 32 PageID #:953

Page 184

53.

Within 10 days of the Effective Date, Respondents must pay the civil money penalty by wire transfer to the Bureau or to the Bureau’s agent in compliance with the Bureau’s wiring instructions.

54.

The civil money penalty paid under this Consent Order will be deposited in the Civil Penalty Fund of the Bureau as required by section 1017(d) of the CFPA, 12 U.S.C. § 5497(d).

55.

Respondents must treat the civil money penalty paid under this Consent Order as a penalty paid to the government for all purposes. Regardless of how the Bureau ultimately uses those funds, Respondents may not: a. Claim, assert, or apply for a tax deduction, tax credit, or any other tax benefit for any civil money penalty paid under this Consent Order; or b. Seek or accept, directly or indirectly, reimbursement or indemnification from any source, including but not limited to payment made under any insurance policy, with regard to any civil money penalty paid under this Consent Order. 56.

To preserve the deterrent effect of the civil money penalty in any Related Consumer Action, Respondents may not argue that Respondents are entitled to, nor may Respondents benefit by, any offset or reduction of any compensatory monetary remedies imposed in the Related Consumer Action because of the civil money penalty paid in this action (Penalty Offset). If the court in any Related Consumer Action grants such a Penalty Offset, Respondents must, within 30 days after entry of a final order granting the Penalty Offset, notify the Bureau, and pay the amount of the Penalty Offset to the U.S. Treasury. Such a payment will not be considered an additional civil money penalty and will not change the amount of the civil money penalty imposed in this action.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 21 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 22 of 32 PageID #:954

Page 185

X Additional Monetary Provisions IT IS FURTHER ORDERED that:

57.

In the event of any default on Respondents obligations to make payment under this Consent Order, interest, computed under 28 U.S.C. § 1961, as amended, will accrue on any outstanding amounts not paid from the date of default to the date of payment, and will immediately become due and payable. 58.

Respondents must relinquish all dominion, control, and title to the funds paid to the fullest extent permitted by law and no part of the funds may be returned to Respondents.

59.

Under 31 U.S.C. § 7701, Respondents, unless they already have done so, must furnish to the Bureau its taxpayer identifying numbers, which may be used for purposes of collecting and reporting on any delinquent amount arising out of this Consent Order.

60.

Within 30 days of the entry of a final judgment, consent order, or settlement in a Related Consumer Action, Respondents must notify the Assistant Deputy for Consumer Reporting of the final judgment, consent order, or settlement in writing. That notification must indicate the amount of redress, if any, that Respondents paid or are required to pay to consumers and describe the consumers or classes of consumers to whom that redress has been or will be paid. XI Reporting Requirements IT IS FURTHER ORDERED that:

61.

Respondents must notify the Bureau of any development that may affect compliance obligations arising under this Consent Order, including but not limited 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 22 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 23 of 32 PageID #:955

Page 186

to, a dissolution, assignment, sale, merger, or other action that would result in the emergence of a successor company; the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Consent Order; the filing of any bankruptcy or insolvency proceeding by or against Respondents; or a change in Respondents name or address. Respondents must provide this notice, if practicable, at least 30 days before the development, but in any case no later than 14 days after the development. 62.

Within 7 days of the Effective Date, Respondents must designate at least one telephone number and email, physical, and postal address as points of contact, which the Bureau may use to communicate with Respondents. 63.

Respondents must report any change in the information required to be submitted under Paragraph 61 at least 30 days before the change or as soon as practicable after the learning about the change, whichever is sooner. 64.

Within 120 days of the Effective Date, and again one year after the Effective Date, Respondents must submit to the Assistant Deputy for Consumer Reporting an accurate written compliance progress report (Compliance Report) that has been approved by the Board or duly authorized committee thereof, which, at a minimum:

a. Describes in detail the manner and form in which Respondents have complied with this Order; and b. Attaches a copy of each Order Acknowledgment obtained under Section XII, unless previously submitted to the Bureau.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 23 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 24 of 32 PageID #:956

Page 187

XII Order Distribution and Acknowledgment IT IS FURTHER ORDERED that:

65. Within 30 days of the Effective Date, Respondents must deliver a copy of this Consent Order to each of their board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who have responsibilities related to the subject matter of the Consent Order.

66.

For five years from the Effective Date, Respondents must deliver a copy of this Consent Order to any business entity resulting from any change in structure referred to in Section XI, any future board members and executive officers, as well as to any managers, employees, affiliates, service providers, or other agents and representatives who will have responsibilities related to the subject matter of the Consent Order before they assume their responsibilities. 67.

Respondents must secure a signed and dated statement acknowledging receipt of a copy of this Consent Order, ensuring that any electronic signatures comply with the requirements of the E-Sign Act, 15 U.S.C. § 7001 et seq., within 30 days of delivery, from all persons receiving a copy of this Consent Order under this Section. XIII Recordkeeping IT IS FURTHER ORDERED that:

68.

Respondents must create, or if already created, must retain for at least five years from the Effective Date, the following business records: a. All documents and records necessary to demonstrate full compliance with each provision of this Consent Order, including all submissions to the Bureau. 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 24 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 25 of 32 PageID #:957

Page 188

b. All documents and records pertaining to the Redress Plan, described in Section VIII above.

c. Copies of all internet (website), direct email, and print advertisements, sufficient to demonstrate the experience of consumers on each materially different version of each advertisement, including all order flow pages on which Respondents, whether acting directly or indirectly, advertise, promote, market, offer for sale, sell, or provide Credit Related Products, and any other marketing material, including, but not limited to, sales scripts and training materials relating to the Credit-Related Products, including any such materials used by a third party or affiliate on behalf of Respondents; d. For each internet (website), direct email, print advertisement, or other marketing material relating to Credit-Related Products: A record of the date(s) and locations or placements where the advertisement is publicly accessible to the extent that information is available; the number, type, and cost of all Credit- Related Products purchased through the advertisement; and any and all modifications made to the advertisement, including to any disclosure(s) on the advertisement;

e. A record of all consumer perception assessments or testing and all documents created pursuant to the requirements of Section VI; and f.

For each internet (website) advertisement, the number of visits to, unique visitors, impressions of, and clicks on the advertisement and any associated landing and flow page(s), to the extent that information is available; and the number of conversions, purchases of a Credit-Related Product, and consumers acquired through the advertisement.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 25 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 26 of 32 PageID #:958

Page 189

g. For each individual Affected Consumer: the consumer’s name, address, phone number, email address, amount paid, description of the Credit-Related Product purchased, the date on which the Credit-Related Product was purchased, and, if applicable, the date and reason consumer left the program. h. For each Credit-Related Product, accounting records showing the gross and net revenues generated by the Credit-Related Product. i.

All Consumer Complaints and refund requests (whether received directly or indirectly, such as through a third party) relating to any Credit-Related Product, and any responses to those complaints or requests. j.

Respondents must make the documents identified in Paragraph 68 available to the Bureau upon the Bureau’s request.

Respondents will retain telephonic communications with consumers in accordance with its standard document retention policy, as set forth in the Compliance Plan.

XIV Notices IT IS FURTHER ORDERED that:

Unless otherwise directed in writing by the Bureau, Respondents must provide all submissions, requests, communications, or other documents relating to this Consent Order in writing, with the subject line, “In re TransUnion Interactive, Inc.; Trans Union, LLC, and; TransUnion, File No. 201 -CFPB- ,” and send them either:

By overnight courier (not the U.S. Postal Service), as follows: Assistant Deputy for Consumer Reporting Consumer Financial Protection Bureau 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 26 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 27 of 32 PageID #:959

Page 190

230 South Dearborn Street Suite 1590 Chicago, IL 60604 b. By first-class mail to the below address and contemporaneously by email to [email protected]:

Assistant Deputy for Consumer Reporting Consumer Financial Protection Bureau 230 South Dearborn Street Suite 1590 Chicago, IL 60604 XV Cooperation with the Bureau 70.

Respondents must cooperate fully to help the Bureau determine the identity and location of each Affected Consumer. Respondents must provide such information in their or their agents’ possession or control within 30 days of receiving a written request from the Bureau.

XVI Compliance Monitoring IT IS FURTHER ORDERED that, to monitor Respondents’ compliance with this Consent Order:

71.

Within 30 days of receipt of a written request from the Bureau, Respondents must submit additional Compliance Reports or other requested information, which must be made under penalty of perjury; provide sworn testimony; or produce documents.

72.

Respondents must permit Bureau representatives to interview any employee or other person affiliated with Respondents who has agreed to such an interview. The person interviewed may have counsel present.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 27 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 28 of 32 PageID #:960

Page 191

73.

Nothing in this Consent Order will limit the Bureau’s lawful use of civil investigative demands under 12 C.F.R. § 1080.6 or other compulsory process. XVII Modifications to Non-Material Requirements IT IS FURTHER ORDERED that:

74.

Respondents may seek a modification to non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) by submitting a written request to the Assistant Deputy for Consumer Reporting.

75.

The Assistant Deputy for Consumer Reporting may, in his/her discretion, modify any non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) if he/she determines good cause justifies the modification. Any such modification by the Assistant Deputy for Consumer Reporting must be in writing.

XVIII Administrative Provisions 76.

The provisions of this Consent Order do not bar, estop, or otherwise prevent the Bureau, or any other governmental agency, from taking any other action against Respondents, except as described in Paragraph 77. 77.

The Bureau releases and discharges Respondents from all potential liability for law violations that the Bureau has or might have asserted based on the practices described in Section IV of this Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. The Bureau may use the practices described in this Consent Order in future 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 28 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 29 of 32 PageID #:961

Page 192

enforcement actions against Respondents and their affiliates, including, without limitation, to establish a pattern or practice of violations or the continuation of a pattern or practice of violations or to calculate the amount of any penalty. This release does not preclude or affect any right of the Bureau to determine and ensure compliance with the Consent Order, or to seek penalties for any violations of the Consent Order.

78.

This Consent Order is intended to be, and will be construed as, a final Consent Order issued under section 1053 of the CFPA, 12 U.S.C. § 5563, and expressly does not form, and may not be construed to form, a contract binding the Bureau or the United States.

79.

This Consent Order will terminate five years from the Effective Date or five years from the most recent date that the Bureau initiates an action alleging any violation of the Consent Order by Respondents. If such action is dismissed or the relevant adjudicative body rules that Respondents did not violate any provision of the Consent Order, and the dismissal or ruling is either not appealed or upheld on appeal, then the Consent Order will terminate as though the action had never been filed. The Consent Order will remain effective and enforceable until such time, except to the extent that any provisions of this Consent Order have been amended, suspended, waived, or terminated in writing by the Bureau or its designated agent. 80. Calculation of time limitations will run from the Effective Date and be based on calendar days, unless otherwise noted.

81.

Should Respondents seek to transfer or assign all or part of its operations that are subject to this Consent Order, Respondents must, as a condition of sale, obtain the 2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 29 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 30 of 32 PageID #:962

Page 193

written agreement of the transferee or assignee to comply with all applicable provisions of this Consent Order.

82.

The provisions of this Consent Order will be enforceable by the Bureau. For any violation of this Consent Order, the Bureau may impose the maximum amount of civil money penalties allowed under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c). In connection with any attempt by the Bureau to enforce this Consent Order in federal district court, the Bureau may serve Respondents wherever Respondents may be found and Respondents may not contest that court’s personal jurisdiction over Respondents.

83.

This Consent Order and the accompanying Stipulation contain the complete agreement between the parties. The parties have made no promises, representations, or warranties other than what is contained in this Consent Order and the accompanying Stipulation. This Consent Order and the accompanying Stipulation supersede any prior oral or written communications, discussions, or understandings.

84.

When a consumer is offered or provided a Credit-Related Product pursuant to the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681g or a state law regarding credit file security freezes, Respondents will follow any applicable requirements mandated by those laws in lieu of the requirements of Sections V and Section XIII of this Consent Order.

85.

Nothing in this Consent Order or the accompanying Stipulation may be construed as allowing Respondents, their Boards, officers, or employees to violate any law, rule, or regulation.

2017-CFPB-0002 Document 1 Filed 01/03/2017 Page 30 of 31 Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 31 of 32 PageID #:963

Page 194

Case: 1:22-cv-01880 Document #: 99-1 Filed: 05/24/23 Page 32 of 32 PagelD #:964 2017-CFPB-0002 Document1 Filed 01/03/2017 Page 31 of 31

IT IS SO ORDERED, this 3 ch day of January, 2017.

Feokud) Chew

Richard Cordray Director Consumer Financial Protection Bureau

a1

Page 195

APPENDIX B Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 1 of 6 PageID #:965

Page 196

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU File No. 201 CFPB- STIPULATION AND CONSENT TO THE ISSUANCE OF A CONSENT ORDER In the matter of:

TransUnion Interactive, Inc., TransUnion, LLC, and TransUnion The Consumer Financial Protection Bureau (Bureau) intends to initiate an administrative proceeding against TransUnion Interactive, Inc. (TUI), TransUnion, LLC (TULLC), and TransUnion (collectively, Respondents), under 12 U.S.C. §§ 5563 and 5565, for their deceptive and misleading advertisements for Credit-Related Products in violation of the Consumer Financial Protection Act’s (CFPA) prohibition on unfair, deceptive, or abusive acts or practices, 12 U.S.C. §§ 5531, 5536. Respondents, in the interest of compliance and resolution of the matter, and without admitting or denying any wrongdoing, consent to the issuance of a Consent Order substantially in the form of the one to which this Stipulation and Consent to the Issuance of a Consent Order is attached (Consent Order), and which is incorporated by reference.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 1 of 5 Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 2 of 6 PageID #:966

Page 197

In consideration of the above premises, Respondents agree to the following: Jurisdiction 1.

The Bureau has jurisdiction over this matter under sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563, 5565.

Consent 2.

Respondents agree to the issuance of the Consent Order, without admitting or denying any of the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over Respondents and the subject matter of this action.

3.

Respondents agree that the Consent Order will be deemed an “order issued with the consent of the person concerned” under 12 U.S.C. § 5563(b)(4), and agrees that the Order will become a final order, effective upon issuance, and will be fully enforceable by the Bureau under 12 U.S.C. §§ 5563(d)(1) and 5565. 4.

Respondents voluntarily enter into this Stipulation and Consent to the Issuance of a Consent Order.

5.

The Consent Order resolves only Respondents’ potential liability for law violations that the Bureau asserted or might have asserted based on the practices described in Section IV of the Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. Respondents acknowledge that no promise or representation has been made by the Bureau or any employee, agent, or representative of the Bureau, about any liability outside of this action that may have arisen or may arise from the facts underlying this action or immunity from any such liability.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 2 of 5 Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 3 of 6 PageID #:967

Page 198

6.

Respondents agree that the facts described in Section IV of the Consent Order will be taken as true and be given collateral estoppel effect, without further proof, in any proceeding before the Bureau to enforce the Consent Order, or in any subsequent civil litigation by the Bureau to enforce the Consent Order or its rights to any payment or monetary judgment under the Consent Order. 7.

The terms and provisions of this Stipulation and the Consent Order will be binding upon, and inure to the benefit of, the parties hereto and their successors in interest. 8.

Respondents agree that the Bureau may present the Consent Order to the Bureau Director for signature and entry without further notice. Waivers 9.

Respondents, by consenting to this Stipulation, waives: a. Any right to service of the Consent Order, and agree that issuance of the Consent Order will constitute notice to the Respondents of its terms and conditions;

b. Any objection to the jurisdiction of the Bureau, including, without limitation, under section 1053 of the CFPA, 12 U.S.C. § 5563; c. The rights to all hearings under the statutory provisions under which the proceeding is to be or has been instituted; the filing of proposed findings of fact and conclusions of law; proceedings before, and a recommended decision by, a hearing officer; all post-hearing procedures; and any other procedural right available under section 1053 of the CFPA, 12 U.S.C. § 5563, or 12 CFR Part 1081;

d. The right to seek any administrative or judicial review of the Consent Order; 2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 3 of 5 Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 4 of 6 PageID #:968

Page 199

e. Any claim for fees, costs or expenses against the Bureau, or any of its agents or employees, and any other governmental entity, related in any way to this enforcement matter or the Consent Order, whether arising under common law or under the terms of any statute, including, but not limited to the Equal Access to Justice Act and the Small Business Regulatory Enforcement Fairness Act of 1996; for these purposes, Respondents agree that Respondents are not the prevailing parties in this action because the parties have reached a good faith settlement;

f.

Any other right to challenge or contest the validity of the Consent Order; g. Such provisions of the Bureau’s rules or other requirements of law as may be construed to prevent any Bureau employee from participating in the preparation of, or advising the Director as to, any order, opinion, finding of fact, or conclusion of law to be entered in connection with this Stipulation or the Consent Order; and h. Any right to claim bias or prejudgment by the Director based on the consideration of or discussions concerning settlement of all or any part of the proceeding.

2017-CFPB-0002 Document 2 Filed 01/03/2017 Page 4 of 5 Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 5 of 6 PageID #:969

Page 200

Case: 1:22-cv-01880 Document #: 99-2 Filed: 05/24/23 Page 6 of 6 PagelD #:970 2017-CFPB-0002 Document2_ Filed 01/03/2017 Page5of5

TransUnion Interactive, Inc.;

Trans Union, LLC, and;

TransUnion

| h \2/22/ |b si Blenke Date Executive Vice President The undersigned director of TransUnion acknowledges having read this Stipulation and the Consent Order, and a, ¢ / entering into this Stipulation. (2 [22/\b

J aan Date Directef, President and Chief Executive Officer, TransUnion

Page 201

APPENDIX C Case: 1:22-cv-01880 Document #: 99-3 Filed: 05/24/23 Page 1 of 4 PageID #:971

Page 202

Appendix C, Screen 1 Case: 1:22-cv-01880 Document #: 99-3 Filed: 05/24/23 Page 2 of 4 PageID #:972

Page 203

Appendix C, Screen 2

Case: 1:22-cv-01880 Document #: 99-3 Filed: 05/24/23 Page 3 of 4 PageID #:973

Page 204

Case: 1:22-cv-01880 Document #: 99-3 Filed: 05/24/23 Page 4 of 4 PagelD #:974

Appendix C, Screen 3

&) TransUnion” E} Support B] Login

Be in the know with TransUnion® - see your TransUnion Secure Server credit score NOW

Step 1 Step 2 Step3

has} Tell us about yourself &:| Create your account SD Verify your identity For your protection, we need to make sure you are really identified a ~ & a Su) = Questions? A

my

Is the Identity Verification ctep essential to

Which of these cities are you associated with? registration?

Can I leave the cite before | em finished?

None of the above

From the following list. select the city in which you lived

None of the above

Which of the following hunting or fishing licenses do you have or have you had in the past?

© None of the above

VERIFY MY IDENTITY S)

Signup Memberlogin Aboutus Support TermsofUse Privacy

This site is hosted end operated by TransUnion Consumer Interactive, Inc., « wholly owned subsidiery of TrancUnion

Copyright 2017 TransUnion Consumer Interactive. All Rights Reserved

Page 205

APPENDIX D Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 1 of 10 PageID #:975

Page 206

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 2 of 10 PagelD #:976

Appendix D.1, Screen1 |Go|FreeCredit.com TransUnion” eexperian. EQUIFAX:

Did you know?

Apply Let's Get Started See your Free Credit Score & $1 Credit Report in minutes First Name Last Name Street Address Zip It never hurts to check your score. plaie GIy Monitoring your Credit Score and understanding your Select one... v financial history will help you when it's time to apply for

a loan or credit card, buy a car or rent a home. It's easy Have you lived here for more than 6 months? Oo \e > No to track changes in your score. Checking your own credit will not impact your Credit Score

Email Phone Offer Details Your Social Security Number is required to match your credit score & report. It is secure and will not be Your FREE TransUnion credit score & $1 Credit stored Report are available as part of a 7-day trial of our — ; subscription-based credit monitoring service. You social Security Number Date‘or Birth may cancel at any time during the trial period. At Last 4 Digits Month v Day v Year v the end of your 7-day trial, you will be billed at a low cost of only $24.95 per month (plus tax where Do you have a credit card or debit card? Oo ves iE No applicable).

VantageScore 3.0

Submit & Continue

There are various types of credit scores, and lenders use a variety of different types of credit scores to make lending decisions. The credit score you receive is based on the VantageScore 3.0 model and may not be the credit score model used by your lender.

cking “Submit & Contint reeCredit.com’s Pri Policy & Terms of Use and to

ges, and stand that my

ve markeling communicatic

om GOFreeCredit.com ig partners

‘eccipt of products and/or s

ondition o

Featured On:

yahoo! Y msn

(Ge) BankingRates MarketWatch

FreeCredit.com iy & » | \ 5 | Contact Us

TransUnion Ir

e children as individuals under the age site is not intended for the use of oO not licit or collect information from children

Page 207

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 3 of 10 PagelD #:977

Appendix D.1, Screen2

’

|GO|FreeCredit.com TransUnion

a s i .

zexperian. EQuIFAx

Did you know?

Verify Verify your identity In order to verify your identity, please answer the following security questions

In Hou applied for a hunting or fishing license in which of the following states?

None of the Above

Which of these street names are you associated with?

Offer Details

score & $1 Credit ort are available as part of a 7-day trial of ption-based credit monitoring

Your free TransUnion credit

You may cancel at any time during the riod. At the end of your 7 be billed t of only In iiwhat county did you live in? (plus tax where applicable)

None of the Above trial, you will

95 per month

VantageScore 3.0

| There are various types o 7 anes scores

score you receive is based on the Vs

3.0 model and may nol be the credit score

model used by your lender.

None of the Above

_ ’ i Featured On:

yahoo! ¥ msn

fee) Bankingr MarketWatch

GO|FreeCredit.com

yistere

ransUnion Interactiv

fe define children as ir

Page 208

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 4 of 10 PagelD #:978

Appendix D.1, Screen3

GO|FreeCredit.com

View

ee ee

Time remaining to complete transaction: 4:50

Last step

Let's get

rd Report

x account set up to see

Account Information:

Username @

Security Question

Security Answer @®

Choose a security question. v

Name On Ca Card Number

Expiration Date CW @ Month v Year we

s your home address the same as your billing oO Yes Nc

address?

Jing “written instructions

n iniorme

sUnion Interactive toc

@ s. .

TransUnion fexperian. EQUIFAX

Did you know?

You should be monitoring your credit.

Protect yourself with credit monitoring to make sure your Credit Report end Score are on track. You'll get alerts if changes are made to your account so you

can teke actior

Credit Score & More

Score & Report

Y Upto$1 Million ID Theft insurance

/ Personalized Debt An:

Y Credit Compass VY Toll-Free 1D Theft Specialist

VY EmailUpdates and Alerts

Featured On:

yahoo!

¥Y msn

MarketWatch

Page 209

Appendix D.2 Screen 1, Part 1 (Upper Half) Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 5 of 10 PageID #:979

Page 210

Appendix D.2, Screen 1, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 6 of 10 PageID #:980

Page 211

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 7 of 10 PagelD #:981

Appendix D.2, Screen 2, Part 1 (Upper Half)

EQUIFAX”

e® 2) ° TransUnion Powered ty Credtcom

Next Steps for your Auto Loan:

Make Sure You Know Your Credit Score

@® Verify

Verify your identity In order to verify your identity, please answer the following security questions:

Which of these last names have you used previously?

None of the Above

Which of the following people lives or owns property in Massachusetts?

None of the Above

Which of these phone numbers have you ever used previously?

None of the Above

Offer Details: VantageScore 3.0

Your free TransUnion credit score & $1 Credit Report are available as part There are various types of cedit scores, and lenders use a variety of

of a ?-cay trial of our subscription-based credit monitoring service. You different types of credit scores to make lending decisions. The credit score may cancel at any time during the trial period. At the end of your 7-day trial, you receive is based on the VantageScore 3.0 model and may not be the you wil be billed at a low cost of only $24.95 per month (alus tax where credit score model used by your lender

applicable)

Page 212

Appendix D.2, Screen 2, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 8 of 10 PageID #:982

Page 213

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 9 of 10 PagelD #:983

Appendix D.2, Screen 3, Part 1 (Upper Half)

myAutoloan: TransUnion” "Experian EQUIFAX’

Powered by GOFreeCredit.com

Next Steps for your Auto Loan:

Make Sure You Know Your Credit Score

Account Information @

username

Paseword

Must be between 8-15 characters long, contain letters, numbers, and is case sensitive

Security Questions @

Security question

Choose a security question_ =

Security answer U.S, Issued Credit or Debit Card ©

Name on card

Card number

Expiration date (MM/YY) Security code Is your home address the same as your billing address? Oo Yes No & =

You are agreeing to the service agreement and providing “written instructions’ to TransUnion Interactive, Inc. to

obtain information from your personal credit profile trom Experian, Equifax and/or TransUnion. You authorize TransUnion Interactive, inc. to obtain such information solely to confirm your identity and display your credit data to you

Page 214

Appendix D.2, Screen 3, Part 2 (Lower Half)

Case: 1:22-cv-01880 Document #: 99-4 Filed: 05/24/23 Page 10 of 10 PageID #:984

Stipulation ()

PDF of this document (4 pages)

Page 215

IN THE UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF ILLINOIS EASTERN DIVISION

Consumer Financial Protection Bureau,

Plaintiff,

v.

TransUnion, Trans Union LLC, TransUnion Interactive, Inc., and John T. Danaher,

Defendants.

Case No. 1:22-cv-1880

Hon. Judge Elaine E. Bucklo Hon. Magistrate Judge Daniel P. McLaughlin

JOINT STIPULATION OF VOLUNTARY DISMISSAL Pursuant to Federal Rule of Civil Procedure 41(a)(1)(A)(ii), the Plaintiff and Defendants stipulate that the above-captioned action is voluntarily dismissed against all Defendants, with prejudice, with each party bearing its own costs, expenses, and attorneys’ fees.

Case: 1:22-cv-01880 Document #: 396 Filed: 02/28/25 Page 1 of 4 PageID #:10096

Page 216

Dated: February 28, 2025

Respectfully submitted,

Mark Paoletta Chief Legal Officer

Daniel Shapiro Deputy Chief Legal Officer

Cara Petersen Principal Deputy Enforcement Director

David Rubenstein Deputy Enforcement Director

Jessica Rank Divine Assistant Deputy Enforcement Director

/s/ Jessica Rank Divine Jessica Rank Divine Mary K. Warren Tracy L. Hilmer Anjali Garg

Consumer Financial Protection Bureau 1700 G Street, NW Washington, DC 20552 Telephone: (202) 435-7863 (Divine) Telephone: (202) 435-7459 (Hilmer) Telephone: (202) 435-7815 (Warren) Telephone: (202) 435-9217 (Garg)

Email: [email protected] Email: [email protected] Email: [email protected] Email: [email protected]

Attorneys for Plaintiff Consumer Financial Protection Bureau Case: 1:22-cv-01880 Document #: 396 Filed: 02/28/25 Page 2 of 4 PageID #:10097

Page 217

/s/ Valerie L. Hletko

Valerie L. Hletko Alyssa McGraw (admitted pro hac vice) Samuel Greeley (admitted pro hac vice) Covington & Burling LLP One CityCenter 850 Tenth Street, NW Washington, DC 20001-4956 Tel.: (202) 662-6000 Email: [email protected] Email: [email protected] Email: [email protected]

William E. O’Neil (admitted pro hac vice) Covington & Burling LLP The New York Times Building 620 Eighth Avenue New York, NY 10018-1405 Tel.: (212) 841-1000 Email: [email protected]

Terri L. Mascherin Megan B. Poetzel Jenner & Block LLP 353 N. Clark Street Chicago, IL 60654 Tel.: (312) 222-9350 Email: [email protected] Email: [email protected]

Counsel for Defendants TransUnion, Trans Union LLC, TransUnion Interactive, Inc.

/s/ Jeffrey H. Knox

Jeffrey H. Knox (admitted pro hac vice) Abram J. Ellis (admitted pro hac vice) Noah Gimbel (admitted pro hac vice) Nicole A. Palmadesso (admitted pro hac vice) SIMPSON THACHER & BARTLETT LLP 900 G Street, NW Washington, DC 20001 [email protected] [email protected] Case: 1:22-cv-01880 Document #: 396 Filed: 02/28/25 Page 3 of 4 PageID #:10098

Page 218

[email protected] Telephone: (202) 636-5500 Facsimile: (202) 636-5502

Ronald S. Safer RILEY SAFER HOLMES & CANCILA LLP 70 W. Madison Street, Suite 2900 Chicago, IL 60602 [email protected] Telephone: (312) 471-8736 Facsimile: (312) 471-8701

Counsel for Defendant John T. Danaher Case: 1:22-cv-01880 Document #: 396 Filed: 02/28/25 Page 4 of 4 PageID #:10099