UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

FORM 10-K

Securities Registered Pursuant to Section 12(b) of the Act:

Securities Registered Pursuant to Section 12(g) of the Act:

None

Cautionary Notice Regarding Forward-Looking Statements

This Annual Report on Form 10-K, including the exhibits hereto, contains “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995. These statements are based on the current beliefs and expectations of TransUnion’s management and are subject to significant risks and uncertainties. Actual results may differ materially from those described in the forward-looking statements. Any statements made in this report that are not statements of historical fact, including statements about our beliefs and expectations, are forward-looking statements. Forward-looking statements include information concerning possible or assumed future results of operations, including descriptions of our business plans and strategies. These statements often include words such as “anticipate,” “expect,” “guidance,” “suggest,” “plan,” “believe,” “intend,” “estimate,” “target,” “project,” “should,” “could,” “would,” “may,” “will,” “forecast,” “outlook,” “potential,” “continues,” “seeks,” “predicts,” or the negatives of these words and other similar expressions.

Unless the context indicates otherwise, any reference to the “Company,” “we,” “us,”“us” and “our” refers to TransUnion and its direct and indirect subsidiaries.

We are dedicated to building upon our foundation as a global information and insights company that makes trust possible, so people around the world can access the opportunities that can lead to a higher quality of life. We have been in business for over 50 years and have established a long track record of providing innovative solutions to businesses and consumers. Since our founding as a provider of regional credit reporting services, we have built a comprehensive, valuable, and unique database of United States (“U.S.”) consumer information to build products that span many industry verticals. We have also strengthened our data, analytics and technology delivery capabilities and acquired complementary businesses enabling us to enhance our solutions. Leveraging our foundational strength in credit risk oriented products, we have also expanded our solution sets into complementary competencies such as fraud mitigation and digital marketing, which are further strengthened by our acquisition of Neustar and several acquisitions in our Media vertical.marketing.

Globally, we continue to grow our presence, building and acquiring credit reporting agencies in new geographies, establishing strong international footholds to expand into other emerging markets, and expanding the verticals served and solutions offered in local markets. We have also expanded the reach of our consumer solutions both directly and by partnering with other market leaders and innovators.

We believe that our ongoing focus on evolving with the market and with our customers’ needs ensures continued improvement in our overall services to businesses and consumers. Leveraging our trusted brand, global scale and strong market position in the verticals we serve will allow us to capitalize on business opportunities worldwide and contribute to our long-term growth.

We believe we are well-positioned to capitalize on the long-term trend of businesses and consumers using data and analytics to make more informed decisions and manage risk more effectively. As worldwide spending on data and analytics increases, we believe there are several key trends in the global macroeconomic environment affecting the geographies and industry verticals we serve that will create increasing demand for our solutions:

Our long operating history and thought leadership in the industry have allowed us to build comprehensive and unique data assets that would be difficult for a new market entrant to replicate. Our solutions are based on a foundation of financial, credit, alternative credit, fraud, marketing, identity, bankruptcy, lien, judgment, automotive and other relevant information obtained from thousands of sources including financial institutions, private databases, public records repositories and other alternative data sources. We refine, standardize and enhance this data using sophisticated algorithms to create proprietary databases. We are constantly updating our data to keep it current, and we continue to identify opportunities to acquire additional data. We believe that our data is unique and differentiates us from our competitors. We own several proprietary datasets such as consumer credit information, driver violation history, phone activity, digital device identifiers, business data and rental payment history. Our global data assets encompass alternative data, such as the voter registry in India, a vehicle information database in

At the beginning of 2020, we announced anProject Rise, a multi-phase initiative to further enhancefundamentally transform our technology infrastructure throughby implementing a multi-year investmentglobal cloud-based approach. Once completed, we believe this cloud-based foundation will provide us with a secure, efficient and reliable infrastructure that we refer to as Project Rise. This investment is a continuing evolution of our hybrid public-private cloud infrastructure, and is a significant upgrade to our existing infrastructure. Project Rise is an initiative designed to ensure that our technology is even more effective, efficient, secure and reliable, which we believe will enable us to perform at our highest levelleverage across all of TransUnion. Our investment will be concentrated in streamlining processes, increasing automation,In December 2021, the Company acquired Neustar and rapidly adopting a hybrid public and private cloud approach globally for a state-of-the-art technology infrastructure. We are focused on building new capabilities and developing our talent internally, to create an efficient cloud-native workforce that will provide us long-term, sustained benefits.

In November 2023, we announced the next step in our technology modernization to further leverage Neustar’s technology to standardize and streamline our product delivery platforms onto a single solutions enablement platform, OneTru, and one infrastructure operating system. Using the foundations of Neustar’s OneID platform, and their established cloud competenceinfrastructure from both Neustar and Project Rise, this new target-state architecture will consolidate disparate platforms acquired through past business acquisitions to powerunlock additional value from these assets. We will also reduce the number of applications that were built over the last decade of expansion and acquisitions, allowing for an enhanced security posture to meet all of our non-credit products. We believe thisregulatory demands. By creating a single infrastructure operating system across on-premise private cloud and public cloud providers, we are creating a single control plane that will resultallow us to optimize our data center posture. This will allow us to drive operational efficiency through services rationalization to provide a consistent and standardized set of global services and capabilities across our technology landscape, creating capacity for product innovation.

OneTru, our solutions enablement platform, will allow us to efficiently activate our assets in a more scalable, secure, efficientsingle, multilayered ecosystem. OneTru helps TransUnion create a unified approach that makes rapid innovation possible by enabling three key outcomes:

Deep and Specialized Industry Expertise

We have been operating internationally for over 30 years and have strong global brand recognition. We have strategically targeted attractive international markets in both developed and emerging economies and have a diversified global presence, including a strong presence in Canada, Latin America, the United Kingdom,U.K., Africa, India, and Asia Pacific. Local senior management in our International markets provide us with deeperdeep insights into these markets and strongerstrong relationships with our customers. We have leveraged our brand, operating history, global footprint and technology infrastructure to establish new credit bureaus in several international markets, such as Canada in 1989, India in 2001 and the Philippines in 2011. Once we establish a foothold in a region, our model is to expand the services we offer within these markets and then move into adjacent emerging markets. For example, we have used our operations in Hong Kong to expand into other Asia Pacific countries and provide analytic scoring models in the Philippines, Singapore, Malaysia and Thailand. We have used our operations in South Africa to expand into neighboring African countries. We have also entered new markets through strategic acquisitions, including Brazil in 2011, Colombia in 2016, and the United KingdomU.K. in 2018.

Our senior management team has a proven track record of strong performance and significant expertise in the markets we serve, with decades of industry experience. We continue to attract and retain experienced management talent for our businesses. Our team has deep knowledge of the data and analytics sector and expertise across the various industries that we serve. Our team has overseen our expansion into new industries and geographies, while managing ongoing strategic initiatives including our significant technology investments. As a result of the sustained focus of our management team, we have been successful in consistently driving growth, both organically and through acquiring and integrating businesses.

As the demand for data and analytics solutions grows across industries and geographies, we will continue to expand the scope of our underlying data, improve our tools and technology and enhance our analytics and technology solutions capabilities to provide innovative solutions that address this demand. As the needs of businesses and consumers continue to evolve, we continue to help them meet their challenges, which our ongoing investments in data, technology and analytics enable us to do more quickly and efficiently, for example with machine learning, artificial intelligence and deep learning. With our insights and information, our customers can explore connections between people, businesses, assets and locations; identify assets, uncover inconsistencies and identify misrepresentations; and uncover evidence of financial distress.

Our continuous technology investments have also reduced the time to market for new solutions, which allowallows us to react quickly to customer requirements. In addition, these investments alsohave improved and, we believe, will continue to improve efficiency, reliability, security and performance. We also continue to take advantage of strategic partnerships that differentiate us from our competitors. For example, by leveraging our fast, available, and secure technology infrastructure and working together with oneOne of our strategic partners we were ableinnovative, quickly enabled customer solutions is TruIQ Data Enrichment (“TDE”), which enables customers to provide real-timesecurely leverage TransUnion’s dataset matching and identity linking technology in their own data infrastructure. TDE enables customers to compliantly link their sensitive first-party data to TransUnion’s depersonalized consumer credit decisions in a matter of seconds, enablingdata and any additional third-party data to support contracted analytics use cases. This can all be done without requiring the use of a new virtual credit card through consumers’ digital wallets.

We are a leading provider of risk and information solutions in several industry verticals today, including Financial Services and Insurance. We believe there is significant opportunity for further growth within these industries by expanding the number of customers to whom we sell our current solutions as well as by creating innovative new solutions that we can use to grow our presence in these industries. We focus on developing new solutions that address evolving customer needs within our industry verticals. In order to more effectively address these opportunities, we have redeployed and reallocated our sales resources to focus either on new customer opportunities or on selling additional services and solutions to existing customers. With our leading market positions, existing strong relationships in the Financial Services and Insurance verticals, and with our consumer partners, we believe we have the opportunity to further penetrate our existing customer base and capture a strong proportion of their spending across the consumer lifecycle.

In addition to increasing penetration in industries where we have a substantial presence, we continue to createextend our solutions thatto address customer needs inacross a variety of attractive new industries. Our strategy is to identify new solutions that can then be deployed to other markets where they may be applicable. We believe that our capabilities allow us to quickly create and

deliver solutions to newacross industries and geographies, where information-based analyticsthereby driving scalable growth based upon our foundational information and technology solutions capabilities are currently underutilized.analytics. We continue to target other verticals such asincluding Technology, Commerce & Communications, Media & Entertainment, Services & Collections, and Public Sector, Tenant and Employment, and Media, where we see opportunities to leverage our existing data, analyticscapabilities, including those acquired and technology solutions capabilities. Our Neustar acquisition is highly complementary from a vertical perspective, with strong positions in Financial Services, Retail, Telecom, and Media. Neustar’s heritage strength with Telecom providers represents an expanded growth opportunity for TransUnion.through our recent acquisitions, as discussed below.

Extend Further Into Fraud and Marketing Solutions

We believe international markets present a significant opportunity for growth. We have significant scale in some of the world’s fastest growing markets, such as India and Latin America, which positions us to take advantage of the favorable dynamics in these regions as their populations become more credit active. We leverage solutions developed in the United StatesU.S. and in our regions and deploy them to international markets, after localizing them to individual market requirements. For example, after launching CreditVision in the United States,U.S., we have expanded our offerings with similar solutions globally. In markets where we have established a presence, we will expand further into adjacent verticals, such as Insurance and Consumer Solutions, as well as complementary solutions, such as marketing and fraud. We intend to continue to expand into new geographic markets by forming alliances with financial services institutions, industry associations and other local partners, and by pursuing strategic acquisitions. Across all our international expansion initiatives, we will continue to leverage our technology infrastructure to drive speed to market, scale and differentiation.

Our consumer business continues to deliver growth with strong margins, driven by ourfocuses on helping consumers shape their financial future and protect their identity, delivering innovative solutions to consumers both directly and flexible andindirectly through a collaborative partnership model that has expanded the market for consumerthese services, along with greater consumer awareness of the value of their credit information and increased risk of identity theft. With our acquisition of Sontiq, we have added to our foundational credit monitoring solutions with a comprehensive set of identity protection offerings. Our strategy is to grow our own member base in the direct channel as well as expand our reach through partnerships in the indirect channel. Across both channels, our focus is on delivering value-added solutions and features while continuing to improve the consumer experience with more user-friendly interfaces and better customer service and educational tools. Within our indirect channel, we will continue to leverage and enhance our flexible technology platform to expand our relationship with existing partners as well as develop relationships with new partners and enter new verticals. We believe that partnerships not only enable us to grow our own business, but also expand the overall market and provide us access to new consumer segments. We will also continue to leverage our approach in the U.S. consumer market to further expand our consumer operations globally.

We continue to seek opportunities to expand our geographic footprint and further accelerate our growth. In June 2018, we entered the world’s second largest credit market in the U.K. Our U.K. business provides data, analytics and technology solutions to help businesses and consumers make informed decisions across a diverse group of industries. With a strong record of growth and innovation in both core credit and emerging solutions we have achieved strong market success.

We manage our business and report our financial results in three reportable segments: U.S. Markets, International and Consumer Interactive. We also report expenses for Corporate, which provides shared services and conducts enterprise functions. See Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” Part II, Item 8 “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” and Note 20,21, “Reportable Segments,” for further information about our reportable segments.

Our U.S. Markets segment provides consumer reports, actionable insights and analytics to businesses. These businesses use our services to engage and acquire customers, assess consumer ability to pay for services, identify cross-selling opportunities, measure and manage debt portfolio risk, collect debt, verify consumer identities and mitigate fraud risk.

We deliver our solutions across multiple industry vertical markets and report disaggregated revenue as follows:

Within U.S. Markets, we leverage our comprehensive data assets, data matching expertise and predictive analytics to develop solutions:

The International segment provides services similar to our U.S. Markets segment to businesses in select regions outside the United States. Depending on the maturity of the credit economy in each country, services may include credit reports, analytics and technology solutions services and other value-added risk management services. We also have insurance, business and automotive databases in select geographies. These services are offered to customers in a number of industries including financial services, retail credit, insurance, automotive, collections, public sector and communications, and are delivered through both direct and indirect channels. The International segment also provides consumer solutions similar to those offered by our Consumer Interactive segment to help consumers proactively manage their personal finances.finances and take precautions against identity theft. We report disaggregated revenue of our International segment for the following regions:

potential in analytics and technology solutions. We do business with many of the top financial institutions in the countries we serve. We have had a majority ownership interest in the principal consumer credit reporting company in Hong Kong since 1998. In partnership with leading credit card issuers in the Philippines, we launched the first consumer credit reporting agency in that market in 2011. We have also built credit risk scores for the National Credit Bureau of Thailand, in which we have a 12.25% ownership interest, the Credit Bureau of Singapore and the Credit Bureau of Malaysia.

The Consumer Interactive segment offers solutions that help consumers manage their personal finances and take precautions against identity theft. Services in this segment include credit reports and scores, credit monitoring, identity protection and resolution, and financial management for consumers. The segment also provides solutions that help businesses respond to data breach events. Our products are provided through user-friendly online and mobile interfaces and are supported by educational content and customer support. With our acquisition of Sontiq, in 2021, we have added to our foundational credit monitoring solutions with a comprehensive set of identity protection offerings. Our Consumer Interactive segment serves consumers through both direct and indirect channels.

Corporate provides support services to each segment, holds investments and conducts enterprise functions. Certain costs incurred in Corporate that are not directly attributable to one or more of the segments remain in Corporate. These costs are typically enterprise-level costs and are primarily administrative in nature.

We have a highly diversified customer base that includes companies across multiple industries, including Financial Services and Insurance. A substantial portion of our revenue is derived from companies in the financial services industry and from sales in the United States.

We leverage our comprehensive data assets, industry expertise and our technology infrastructure, allowing us to build solutions once and deploy them multiple times across the different verticals and regions. Our evolution to a hybrid public-private cloud infrastructure augments this capability. We provide services to our customers through real-time, online delivery for services such as credit reports and predictive scores, in batch form for services that help our customers proactively acquire new customers, cross-sell to existing customers and help them monitor and manage risk, and through our software-as-a-service offerings, which include a number of solutions that help businesses interpret data, maximize reimbursements, visualize insights, predict model results and apply their customer-specific criteria to facilitate real-time automated decisions at the time of customer interaction, and through our websites to consumers, for various subscription-based and transaction-based products in the United States and in other regions we serve.

Seasonality in the U.S. Markets segment is correlated to volumes of online credit data purchased by our financial services and mortgage customers, and our sales have generally been higher during the second and third quarters. Seasonality in our International segment is driven by local economic conditions and relevant macroeconomic market trends. In our Consumer Interactive segment, demand for our products is usually higher in the first half of the year, impacted by seasonality and our advertising spend.

The market for our services is highly competitive. We compete primarily on the basis of differentiated solutions, datasets, analytics capabilities, ease of integration with our customers’ technology, stability of services, customer relationships, innovation and price. We believe that we compete favorably in each of these categories. Our competitors vary based on the business segment, industry vertical and geographical market that our solutions address.

In our International segment, we generally compete with Equifax and Experian directly or indirectly through their subsidiaries or investments. We also compete with other competitors that may focus on a particular vertical, country or region.

In our Consumer Interactive segment, we generally compete with Equifax, Experian, FICO and LifeLock as well as personal finance websites, some of whom offer free credit information.

In addition to these competitors, we also compete with a number of other companies that may offer niche solutions catering to more specific customer requirements.

We believe the services we provide to our customers reflect our understanding of our customers’ businesses, the depth and breadth of our data and the quality of our analytics and technology solutions capabilities. By integrating our services into our customers’ workflows, we ensure efficiency, continuous improvement and long-lasting relationships.

The continuous operation of our information technology systems is fundamental to our business. Our information technology systems collect, refine, access, process, deliver and store the data that is used to provide our solutions. Our technology is at the core of our innovative solutions, and we continually invest in our technology and thought leaders to be a market leader. There are four critical elements to our global technology enablement strategy:

Our environment is built upon strategic partnerships. Our technology relies on several third-party, best-of-breed solutions as well as proprietary software and tools which we integrate into our platforms. Our control of our technology and infrastructure allows us to prioritize any changes and manage the roll-out of any upgrades or changes. We contract with various third-party providers to help us maintain and support our systems.

In order to create redundancy and increase resiliency, we utilize multiple data centers in all of our major markets. We generally employ similar technologies and infrastructures in each data center to enable the optimal sharing of technical resources across geographies.

We maintain a governance framework for business continuity that includes written policies requiring each business and operating unit to identify and prepare continuity plans for critical functions. Our businesses and operating units have processes in place that are designed to maintain such functions in case there is a disruptive event. We also have a specific disaster recovery plan that will take effect if critical infrastructure or systems fail or become disabled.

Our intellectual property is a strategic advantage and protecting it is critical to our business. Because of the importance of our intellectual property, we treat our brand, software, technology, know-how, concepts and databases as proprietary. We attempt to protect our intellectual property rights under the trademark, copyright, patent, trade secret and other intellectual property laws of the United States and other countries, as well as through the use of licenses and contractual agreements, such as nondisclosure agreements. While we hold various patents, we do not rely primarily on patents to protect our core intellectual property. Through contractual arrangements, disclosure controls and continual associate training programs, our principal focus is to treat our key proprietary information and databases as trade secrets. Also, we have registered certain trademarks, trade names, service marks, logos, internet URLs and other marks of distinction in the United States and foreign countries, the most important of which is the trademark TransUnion name and logo. This trademark is used in connection with most of the services we sell and we believe it is a known mark in the industry.

We own proprietary software that we use to maintain our databases and to develop and deliver our services. We develop and maintain business-critical software that transforms data furnished by various sources into databases upon which our services are

solutions infrastructure that we host and make available for our customers to develop and deploy analytics to improve business performance.

We license certain data and other intellectual property to other companies on arms-length terms that are designed to protect our rights to our intellectual property. We generally use standard licensing agreements and do not provide our intellectual property to third parties without a nondisclosure and license agreement in place.

We also license certain intellectual property that is important for our business from third parties. For example, we license credit-scoring algorithms and the right to sell credit scores derived from those algorithms from third parties for a fee.

Compliance with legal and regulatory requirements is a top priority. We are subject to numerous laws governing the collection, protection, dissemination and use of non-public personal information, credit information and other types of information. These laws are enforced by U.S. federal, state and local regulatory agencies, foreign regulatory authorities and, in some instances, through private civil litigation. Our failure to comply with applicable legal and regulatory requirements could have a negative impact on our financial condition, orresults of operations, reputation and overall operations.

We proactively manage our compliance with laws and regulations through a global legal, risk and compliance departmentframework that ensuresis designed to ensure that enterprise standards are followed. Through the legal, risk and compliance functions, we provide training to our associates, monitor all material laws and regulations, establish compliance policies, routinely review internal processes to determine whether business practice changes are warranted, assist in the development of new products and services, and regularly meet with principal regulators and legislators to ensure transparent engagement regarding our operations.

Our U.S. operations are subject to numerous laws and regulations governing privacy, data security, consumer protection and the use of consumer credit information. Certain of these laws provide for civil and criminal penalties for the unauthorized release of, or access to, this protected information. The laws and regulations that affect our U.S. business include, but are not limited to, the following:

We are also subject to U.S. federal and state laws that are generally applicable to any U.S. business with national or international operations, such as antitrust laws, the Foreign Corrupt Practices Act, the Americans with Disabilities Act, climate-related regulations and various employment laws. We continuously monitor U.S. federal and state legislative and regulatory activities that involve credit reporting, data privacy and security, and other relevant subjects to identify issues in order to remain in compliance with all applicable laws and regulations.

We are subject to data protection, privacy and consumer credit laws and regulations in other jurisdictions where we conduct business. These laws and regulations include, but are not limited to, the following:

In 2018, the FCA introduced Open Banking which aims to improve customer experience and to increase competition in the banking sector. Consumers can share transaction data with third parties via application program interfaces (“APIs”) to identify best products and take up multi-bank products. As part of Open Banking, the Second Payment Services Directive allows merchants to retrieve a customer’s account data from their bank with their consent. The implementation of Open Banking platforms has increased the number of payment service providers available to consumers beyond traditional banks. TransUnion UKU.K. is an authorized information services provider under this regime.

the process for disputing information in a credit file. The NCA is enforced by The National Credit Regulator who has authority to supervise and examine credit bureaus. In addition, the Protection of Personal Information Act (“POPIA”), went into effect on July 1, 2020, with enforcement commencing on July 1, 2021. POPIA regulates the processing of personal information of legal and juristic persons, and imposes compliance obligations and sanctions.

Other International Laws

Sustainability

Other than certain employees in Brazil, none of our employees isare currently represented by a labor union or hashave terms of employment that are subject to a collective bargaining agreement. We consider our relationships with our employees to be good and have not experienced any work stoppages.

Talent Acquisition and Retention

Employee Engagement, Training and Development

Safety and Wellness

See our upcoming 20212023 Sustainability Report and 20212023 Diversity Report for additional information on these topics. Information contained in such reports are not incorporated herein by reference and should not be considered part of this report.

Available Information

In addition, the SEC maintains an Internet site (www.sec.gov) that contains reports, proxy and information statements and other information regarding issuers that file electronically with the SEC.

Our corporate headquarters are located at 555 West Adams Street, Chicago, Illinois 60661, and our telephone number is (312) 985-2000.

You should carefully consider the following risks as well as the other information included in this report, including “Selected Financial Data,” “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our financial statements and related notes. Any of the following risks could materially and adversely affect our business, financial condition or results of operations. However, the selected risks described below are not the only risks facing us. Additional risks and uncertainties not currently known to us or those we currently view to be immaterial may also materially and adversely affect our business, financial condition or results of operations.

Risks Related to Our Business

housing demand. In addition, a significant amount of our revenues arerevenue is concentrated among certain customers, industries, product offerings and in distinct geographic regions, primarily in the United States. In 2021 and 2020, 53% and 56% of our consolidated gross revenues, respectively, were concentratedStates. Our 2023 revenue in our U.S. Markets Financial Services vertical and in our Consumer Interactive segment collectively.accounted for approximately 33% and 15% of consolidated gross revenues, respectively. If businesses in these industries experience economic hardship, we cannot assure you that we will be able to generate future revenue growth. Our customer base suffers when financial markets experienceexperience volatility, liquidity issues and disruption, which has occurred in the past and which could reoccur, and the potential for increased and continuing disruptions going forward, present considerable risks to our business and revenue. Changes in the economymacroeconomic environment have resulted, and may continue to result, in fluctuations in volumes, pricing and operating margins for our services. If businesses in these industries experience economic hardship, we cannot assure you that we will be able to generate future revenue growth. In addition, if consumer demand for financial services and products and the number of credit applications decrease, the demand for our services could also be materially reduced. High inflation levels has a negative impact on our business by decreasing demand for credit due to slower consumer spending on non-essential goods and services and due to the Federal Reserve raising interest rates to combat inflation. Continued inflation and additional interest rate increases could further materially impact our business. These types of disruptions could lead to a decline in the volumes of services we provide our customers and could negatively impact our revenue and results of operations.

The markets for our services are highly competitive, and we may not be able to compete successfully against our competitors, which could impair our ability to sell our services. We compete on the basis of differentiated solutions, datasets, analytics

Our Consumer Interactive segment experiences competition from emerging companies. For example, prior to 2008, Equifax and Experian were our top competitors for direct-to-consumer credit services, such as credit reports and identity theft protection services. In the past several years, there has been an influx of other companies offering similar services someto ours, free of whom leverage the free services mandated by law to be provided by nationwide credit reporting agencies.charge. These developments have resulted in increased competition.

Many of our competitors have extensive customer relationships, including relationships with our current and potential customers. New competitors, or alliances among competitors, may emerge and gain significant market share. Existing or new competitors may develop products and services that are superior to ours or that achieve greater market acceptance. If we are unable to respond to changes in customer requirements as quickly and effectively as our competition, our ability to expand our business and sell our services may be adversely affected.

Our competitors may be able to sell services at lower prices than we do, individually or as part of integrated suites of several related services. This ability may cause our customers to purchase from our competitors rather than from us. Price reductions by our competitors could also negatively impact our operating margins or harm our ability to obtain new long-term contracts or renewals of existing contracts on favorable terms. Additionally, some of our customers may develop products of their own that replace the products they currently purchase from us, which would result in lower revenue.

We also expect that there will be significant competition in the new markets that we enter. We cannot assure you that we will be able to compete effectively against current and future competitors. If we fail to successfully compete, our business, financial condition and results of operations may be adversely affected.

Public and commercial sources of free or relatively inexpensive consumer information have become increasingly available and this trend is expected to continue. Public and commercial sources of free or relatively inexpensive consumer information, including free credit information from lead generation companies and from banks, may reduce demand for our services. Beginning in April 2020, we began offering free credit reports on a weekly basis. To the extent that our customers choose not to obtain services from us and instead rely on information obtained at little or no cost from these public and commercial sources, our business, financial condition and results of operations may be adversely affected.

We have long-standing relationships with a number of our customers, many of whom could unilaterally terminate their relationship with us or materially reduce the amount of business they conduct with us at any time. Our customer agreements relating to our core credit reporting service offered through our U.S. Markets segment are terminable upon advance written

notice (typically ranging from 30 days to six months) by either us or the customer, which provides our customers with the opportunity to renegotiate their contracts with us or to award more business to our competitors.

We also provide our services to business partners who may combine them with their own or other branded services to be offered as a bundle to consumers, governmental agencies and businesses in support of fraud or credit protection, credit monitoring, identity authentication, insurance or credit underwriting, and collections. Some of these partners are the largest providers of credit information or identity protection services to the U.S. consumer market.

Market competition, business requirements, financial condition and consolidation through mergers or acquisitions, could adversely affect our ability to continue or expand our relationships with our customers and business partners. There is no guarantee that we will be able to retain or renew existing agreements, maintain relationships with any of our customers or business partners on acceptable terms or at all, or collect amounts owed to us from insolvent customers or business partners. The loss of one or more of our major customers or business partners could adversely affect our business, financial condition and results of operations.

In order to keep pace with customer demands for increasingly sophisticated service offerings, to sustain expansion into growth industries and to maintain our profitability, we must continue to innovate and introduce new services to the market. The process

We depend on a number of service providers and key vendors such as telecommunication companies, software engineers, data processors, software and hardware vendors and providers of credit score algorithms, who are critical to our operations. These service providers and vendors are involved with our service offerings, communications and networking equipment, computer hardware and software and related support and maintenance. Although we have implemented service-level agreements and have established monitoring controls, our operations could be disrupted if we do not successfully manage relationships with our service providers, if they do not perform or are unable to perform agreed-upon service levels, or if they are unwilling to make their services available to us at reasonable prices. If our service providers and vendors do not perform their service obligations, it could adversely affect our reputation, business, financial condition and results of operations.

There has been, and we expect there will continue to be, merger, acquisition and consolidation activity in our customer markets. If our customers merge with, or are acquired by, other entities that are not our customers, or that use fewer of our services, our revenue may be adversely impacted. In addition, industry consolidation could affect the base of recurring transaction-based revenue if consolidated customers combine their operations under one contract, since most of our contracts provide for volume discounts. In addition, our existing customers might leave certain geographic markets, which would no longer require them to purchase certain products from us and, consequently, we would generate less revenue than we currently expect.

Risks Related to Technology and Cybersecurity

Data security and integrity are critically important to our business, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of our intellectual property or confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to our reputation.

As a global consumer credit reporting agency and provider of risk and information solutions, we collect, store and transmit a large amount of sensitive and confidential consumer information on over one billion consumers, including financial information, personally identifiable information and protected health information. We operate in an environmentalso rely heavily on computer systems, hardware, software, technology infrastructure and online sites and networks for both internal and external operations that are critical to our business. We face significant and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of significant risk of cybersecurity incidents resulting fromour systems and data including unintentional events orand deliberate attacks by third parties or insiders, which may involve exploiting highly obscuresuch as the

exploitation of “bugs” or security vulnerabilities orin software and hardware and sophisticated attack methods.methods such as ransomware. These cyberattacks can take many forms, but they typically have one or more of the following objectives, among others:

The preventive actions we take to address cybersecurity risk, including protection of our systems and networks, may be insufficient to repel or mitigate the effects of cyberattacks in the future as it may not always be possible to anticipate, detect or recognize threats to our systems, or to implement effective preventive measures against all cybersecurity risks. This is because, among other things:

Unauthorized disclosure, loss or corruption of our data or inability of our customers to access our systems could disrupt our operations, subject us to substantial regulatory and legal proceedings (including class actions) and potential liability, result in a material loss of business and/or significantly harm our reputation.

We may not be able to immediatelytimely address the consequences of a cybersecurity incident because a successful breach of our computer systems, software, networks or other technology assets could occur and persist for an extended period of time before being detected due to, among other things:

The extent of a particular cybersecurity incident and the steps that we may need to take to investigate it may not be immediately clear, and it may take a significant amount of time before such an investigation can be completed and full and reliable information about the incident is known. While such an investigation is ongoing, we may not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, any or all of which could further increase the costs and consequences of a cybersecurity incident.

Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies around the world have adopted consumer notification and other requirements in the event that consumer information is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible. InFor example, in the United States, we are subject to federal and state laws that provide for more than 50 disparate notification regimes.regimes, some of which also provide for statutory damages and private rights of action for plaintiffs who experience certain types of data breaches. In the event of unauthorized access, our failure to comply with the complexities of these various regulations could subject us to regulatory scrutiny and additional liability.

Fraudulent activities committed against us could disrupt our operations, have an adverse effect on our financial results, subject us to substantial legal proceedings and potential liability, result in a material loss of business and/or significantly harm our reputation.

Our ability to provide reliable service largely depends on our ability to maintain the efficient and uninterrupted operation of our computer network, systems and data centers, some of which have been outsourced to third-party providers. In addition, we generate a significant amount of our revenues through channels that are dependent on links to telecommunications providers. Our systems, personnel and operations could be exposed to damage or interruption from fire, natural disasters, pandemic illness, power loss, war, terrorist acts, civil disobedience, telecommunication failures, computer viruses, DDoS attacks or human error. We may not have sufficient redundant operations to cover a loss or failure of our systems in a timely manner. Any significant interruption could severely harm our business and reputation and result in a loss of revenue and customers. Additionally, from time to time we send our customers new releases of our distribution programs, some of which contain security updates. Any failure by our customers to install these new releases could expose our customers to computer security risks.

Our services and products depend extensively upon continued access to and receipt of data from external sources, including data received from customers, strategic partners and various government and public records repositories. In some cases, we compete with our data providers. Our data providers could stop providing data, provide untimely data or increase the costs for their data for a variety of reasons, including a perception that our systems are insecure as a result of a data security incidents, budgetary constraints, a desire to generate additional revenue or for regulatory or competitive reasons. We could also become subject to increased legislative, regulatory or judicial restrictions or mandates on the collection, disclosure or use of such data,

in particular if such data is not collected by our providers in a way that allows us to legally use the data. If we were to lose access to this external data or if our access or use were restricted or were to become less economical or desirable, our ability to provide services could be negatively impacted, which would adversely affect our reputation, business, financial condition and results of operations. We cannot provide assurance that we will be successful in maintaining our relationships with these external data source providers or that we will be able to continue to obtain data from them on acceptable terms or at all. Furthermore, we cannot provide assurance that we will be able to obtain data from alternative sources if our current sources become unavailable.

In our markets, there are continuous improvements in computer hardware, network operating systems, programming tools, programming languages, operating systems, data matching, data filtering and other database technologies and the use of the internet. These improvements, as well as changes in customer preferences or regulatory requirements, may require changes in the technology used to gather and process our data and deliver our services. Our future success will depend, in part, upon our ability to:

We cannot provide assurance that we will successfully implement new technologies, cause customers or data furnishers to implement compatible technologies or adapt our technology to evolving customer, regulatory and competitive requirements. If we fail to respond, or fail to cause our customers or data furnishers to respond, to changes in technology, regulatory requirements or customer preferences, the demand for our services, the delivery of our services or our market reputation could be adversely affected. Additionally, our failure to implement important updates could affect our ability to successfully meet the timeline for us to generate cost savings resulting from our investments in improved technology. Failure to achieve any of these objectives would impede our ability to deliver strong financial results.

Our businesses are subject to regulation under the FCRA, the GLBA, the DPPA, HIPAA, HITECH, the Dodd-Frank Act, the FTC Act and various other international, federal, state and local laws and regulations. See “Business-Legal and Regulatory Matters” for a description of select regulatory regimes to which we are subject. These laws and regulations, which generally are designed to protect the privacy of the public and to prevent the misuse of personal information available in the marketplace, are complex, change frequently and have tended to become more stringent over time. We already incur significant expenses to ensure compliance with these laws.

In addition, many consumer advocates, privacy advocates, legislatures and government regulators believe that existing laws and regulations do not adequately protect privacy and have become increasingly concerned with the collection and use of this type of personal information. As a result, severalthirteen U.S. states have recently introduced and passed comprehensive privacy legislation to expand data security breach notification rules and to mirror some of the data use limitations required by laws and regulations in the European Union and the U.K. These state laws are intended to provide consumers with greater transparency and control over their personal data. For example, CCPA, which became effective on January 1, 2020, applies toinformation by providing consumers with certain businesses that collect personal information from California residents and establishes several consumer rights, including asuch as the right to know what personal information is being collected about them, and whether and to whom it is sold, athe right to access, their personal information and have it deleted, a right todelete, correct, or opt out of the sale of their personal information,information. The original California Consumer Privacy Act became effective in 2020, with amendments in the California Privacy Rights Act effective in 2023. Similar laws in Colorado, Connecticut, Utah and a rightVirginia became effective over the course of 2023. Similar laws in Delaware, Indiana, Iowa, Montana, Oregon, New Jersey, Tennessee, and Texas take effect over the course of 2024 to equal service and price regardless of exercise of2026. While these rights. While the CCPA includeslaws include specific exemptions for practices and activities regulated by FCRA, GLBA, or FCRA,HIPAA and DPPA, including our credit reporting and financial services business, lines, it requires, among other things, new disclosuresthey apply to California consumers, imposes new rules for collecting or using information about minors, and affords consumers new abilities to opt out of certain disclosures of personal information in other portions of our business that are not regulated by GLBA or FCRA. On November 3, 2020, California adopted the California Privacy Rights Act (the “CPRA”), which amends and expands CCPA. It is anticipated that most of the substantive provisions of CPRA will go into effect in 2023.these laws.

Public concern regarding identity theft also has led to more transparency for consumers as to what is in their credit reports. We provide credit reports and scores and monitoring services to consumers for a fee, and this income stream could be reduced or restricted by legislation that requires us to provide these services to consumers free of charge. For example, under U.S. federal

law today, we are required to provide consumers with one credit report per year free of charge, and beginning in April 2020, we began offering consumers free weekly credit reports.

The following legal and regulatory developments also could have a material adverse effect on our business, financial condition or results of operations:

Changes in applicable legislation or regulations that restrict or dictate how we collect, maintain, combine and disseminate information, or that require us to provide services to consumers or a segment of consumers without charge, could adversely affect our business, financial condition or results of operations. Evolutions in consumer finance regulatory requirements or market practices involving our customers also might negatively affect our businesses and the markets into which we sell. For instance, the Federal Housing Finance Agency and various government sponsored entities continue to evaluate permitting mortgage originators to underwrite loans using only two credit reports, rather than the current mandate to use a credit report from each of the three national consumer reporting agencies. In the future, we may be subject to significant additional expense to ensure continued compliance with applicable laws and regulations and to investigate, defend or remedy actual or alleged violations. Any failure by us to comply with applicable laws or regulations could also result in significant liability to us, including liability to private plaintiffs as a result of individual or class action litigation, or may result in the cessation of our operations or portions of our operations or impositions of fines and restrictions on our ability to carry on or expand our operations. Moreover, our compliance with privacy laws and regulations and our reputation depend in part on our customers’ adherence to privacy laws and regulations and their use of our services in ways consistent with consumer expectations and regulatory requirements. Certain of the laws and regulations governing our business are subject to interpretation by judges, juries and administrative entities, creating substantial uncertainty for our business. We cannot predict what effect the interpretation of existing or new laws or regulations may have on our business. See “Business-Legal and Regulatory Matters.”

In 2012, credit reporting companies like us became subject to a federal supervision program for the first time under the CFPB’s authority to supervise and examine certain non-depository institutions that are “larger participants” of the consumer credit reporting market. The CFPB conducts examinations and investigations, and may issue subpoenas and bring civil actions in federal court for violations of the federal consumer financial laws including FCRA. In these proceedings, the CFPB can seek relief that includes: rescission or reformation of contracts, restitution, disgorgement of profits, payment of damages, limits on activities and civil money penalties of up to $1.0 million per day for knowing violations. The CFPB conducts periodic examinations of us and the consumer credit reporting industry, which could result in new regulations or enforcement actions or proceedings. Actions by the CFPB could result in requirements to alter or cease offering affected products and services, making them less attractive and restricting our ability to offer them.

assistance to TransUnion Interactive, Inc. in violating the 2017 Consent Order and the law. We are currently in active litigation against us in this matter, nor are we able to predictwith the likely outcome ofCFPB on this matter. As of December 31, 2021,2023, we have an accrualaccrued liability of $26.5 $56.0 million recorded in connection with this matter and there is a reasonable possibility that a loss in excess of the amount accrued may be incurred, and such an outcome could have a material adverse effect on our results of operations and financial condition, however, any possible loss or range of loss in excess of the amount accrued is not reasonably estimable at this time. condition.

See “FINANCIAL STATEMENTS AND SUPPLEMENTARY DATAPart II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 20,23, “Contingencies” for information regarding our legal proceedings.

Additionally, in March 2022, we received a NORA letter from the CFPB, informing us that the CFPB’s Enforcement Division is considering whether to recommend that the CFPB take legal action against us related to our tenant and employment screening business, TransUnion Rental Screening Solutions, Inc. (“TURSS”). The NORA letter alleged that Trans Union LLC and TURSS violated the FCRA by failing to (i) follow reasonable procedures to assure maximum possible accuracy of information in consumer reports and (ii) disclose to consumers the sources of such information. On July 27, 2022, the CFPB’s Enforcement Division advised us that it had obtained authority to pursue an enforcement action jointly with the FTC. On October 5, 2023, we reached a settlement in the form of a Consent Order with the CFPB and the FTC regarding this matter, pursuant to which we agreed to pay $11.0 million in redress and $4.0 million in civil money penalties and implement certain business process changes. As of December 31, 2023, the settlement was paid in full to the CFPB.

Recently, the consumer reporting industry has been subject to heightened scrutiny. Based in part on public comments by CFPB officials, we believe that this trend is likely to continue and could result in reputational harm, paymentmore regulatory and legislative scrutiny of damagesthe practices of our industry and civil monetary penalties, injunctive relief and/or restitution, any ofadditional regulatory enforcement actions and litigation, which could have a material adverse effect onadversely affect our business and results of operations and financial condition. operations.

Our compliance costs and legal and regulatory exposure could increase materially if we are targeted by the CFPB for additional enforcement actions, or if the CFPB or other regulators enact new regulations, change regulations that were previously adopted, modify through supervision or enforcement past regulatory guidance, or interpret existing regulations in a manner different or stricter than have been previously interpreted. For example, the CFPB recently issued guidance that indicates increased focus on consumer reporting agencies’ compliance with the accuracy and dispute obligations under the FCRA with respect to rental information. Although we have committed resources to enhancing our risk and compliance programs, actions by the CFPB or other regulators against us or our current or former executives could result in increased operating costs, reputational harm, payment of damages and civil monetary penalties, injunctive relief and/or restitution, any of which could have a material adverse effect on our business, results of operations and financial condition.

The Office of the Comptroller of the Currency’s (the “OCC”) guidance to national banks and federal savings associations on assessing and managing risks associated with third-party relationships, which include all business arrangements between a bank and another entity, by contract or otherwise, requires banks to exercise comprehensive oversight throughout each phase of a bank’s business arrangement with third-party service providers, and instructs banks to adopt risk management processes commensurate with the level of risk and complexity of its third-party relationships. The OCC expects especially rigorous oversight of third-party relationships that involve certain “critical activities.activities,” which include significant bank functions or significant shared services or other activities that could have a major impact on a bank’s operations. In light of this guidance, our existing or potential financial services customers subject to OCC regulation may continue to revise their third-party risk management policies and processes and the terms on which they do business with us, which may adversely affect our relationship with such customers.

Legal proceedings arise frequently as part of the normal course of our business. These may include individual consumer cases, class action lawsuits and inquiries, investigations, examinations, regulatory proceedings or other actions brought by federal or state authorities or by consumers. The scope and outcome of these proceedings is often difficult to assess or quantify. Plaintiffs in lawsuits may seek recovery of large amounts and the cost to defend such litigation may be significant. There may also be

adverse publicity and uncertainty associated with investigations, litigation and orders (whether pertaining to us, our customers or our competitors) that could decrease customer acceptance of our services or result in material discovery expenses. In addition, a court-ordered injunction or an administrative cease-and-desist order or settlement may require us to modify our

See “FINANCIAL STATEMENTS AND SUPPLEMENTARY DATAPart II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 22,23, “Contingencies” for information regarding our legal proceedings.

Our success depends, in part, on our ability to protect and preserve the proprietary aspects of our technology and services. If we are unable to protect our intellectual property, including trade secrets and other unpatented intellectual property, our competitors could use our intellectual property to market and deliver similar services, decreasing the demand for our services. We rely on the patent, copyright, trademark, trade secret and other intellectual property laws of the United States and other countries, as well as contractual restrictions, such as nondisclosure agreements, to protect and control access to our proprietary intellectual property. These measures afford limited protection, however, and may be inadequate. We may be unable to prevent third parties from using our proprietary assets without our authorization or from breaching any contractual restrictions with us. Enforcing our rights could be costly, time-consuming, distracting and harmful to significant business relationships. Claims that a third party illegally obtained and is using trade secrets can be difficult to prove, and courts outside the United States may be less willing to protect trade secrets. Additionally, others may independently develop non-infringing technologies that are similar or superior to ours. Any significant failure or inability to adequately protect and control our proprietary assets may harm our business and reduce our ability to compete.

There has been substantial litigation in the United States regarding intellectual property rights in the information technology industry. We cannot be certain that we do not infringe on the intellectual property rights of third parties, including the intellectual property rights of third parties in other countries, which could result in a liability to us. Historically, patent applications in the United States and some foreign countries have not been publicly disclosed until eighteen months following submission of the patent application, and we may not be aware of currently filed patent applications that relate to our products or processes. If patents are later issued on these applications, we may be liable for infringement. In the event that claims are asserted against us, we may be required to obtain licenses from third parties (if available on acceptable terms or at all). Any such claims, regardless of merit, could be time consuming and expensive to litigate or settle, divert the attention of management and materially disrupt the conduct of our business, and we may not prevail. Intellectual property infringement claims against us could subject us to liability for damages and restrict us from providing services or require changes to certain products or services. Although our policy is to obtain licenses or other rights where necessary, we cannot provide assurance that we have obtained all required licenses or rights. If a successful claim of infringement is brought against us and we fail to develop non-infringing products or services, or to obtain licenses on a timely and cost-effective basis, our reputation, business, financial condition and results of operations could be adversely affected.

Risks Related to Our Growth Strategy

We have acquired and may continue to acquire or make investments in businesses that offer complementary services and technologies. Acquisitions may not be completed on favorable terms and acquired assets, data or businesses may not be successfully integrated into our operations. Even if we devote substantial management attention and resources to integrating acquired businesses in order to fully realize the anticipated benefits of such acquisitions, the businesses and assets acquired may not be successful or continue to grow at the same rate as when operated independently or may require greater resources and investments than we originally anticipated. Acquisitions such as the acquisitions of Neustar and Sontiq, involve significant risks and uncertainties, including:

We have divested our Healthcare business and may in the future divest certain assets or businesses that no longer fit with our growth strategy. Divestitures involve significant risks and uncertainties, including:

These risks could harm our business, financial condition or results of operations, particularly if they occur in the context of a significant acquisition or divestiture. In addition, changes in laws and regulations following a significant acquisition or divestiture could adversely impact our business, financial condition, results of operations and growth prospects. Acquisitions of businesses having a significant presence outside the United States will increase our exposure to the risks of conducting operations in international markets.

An important focus of our business is to identify business partners who can enhance our services and enable us to develop solutions that differentiate us from our competitors. We have entered into several alliance agreements or license agreements with respect to certain of our datasets and services and may enter into similar agreements in the future. These arrangements may require us to restrict our use of certain of our technologies among certain customer industries, or to grant licenses on terms that ultimately may prove to be unfavorable to us, either of which could adversely affect our business, financial condition or results of operations. Relationships with our alliance agreement partners may include risks due to incomplete information regarding the marketplace and commercial strategies of our partners, and our alliance agreements or other licensing agreements may be the subject of contractual disputes. If we or our alliance agreements’ partners are not successful in maintaining or commercializing the alliance agreements’ services, such commercial failure could adversely affect our business.

In addition, a significant strategy for our international expansion is to establish operations through strategic alliances or joint ventures with local financial institutions and other partners. We cannot provide assurance that these arrangements will be successful or that our relationships with our partners will continue to be mutually beneficial. If these relationships cannot be established or maintained, it could negatively impact our business, financial condition and results of operations. Moreover, our ownership in and control of our foreign investments may be limited by local law.

We also selectively evaluate and consider acquisitions as a means of expanding our business and entering into new markets. We may not be able to acquire businesses we target due to a variety of factors such as competition from companies that are better positioned to make the acquisition. Our inability to make such strategic acquisitions could restrict our ability to expand our business and enter into new markets which would limit our ability to generate future revenue growth. Additionally, given some of our equity interests in various companies, we may be limited in our ability to require or influence such companies to make acquisitions or take other actions that we believe to be in our or their best interests. Our inability to take such actions could have a material impact on our revenues or earnings.

We have a substantial amount of debt which could adversely affect our financial position and prevent us from fulfilling our obligations under the debt instruments.

In addition, the credit agreement governing Trans Union LLC’s senior secured credit facility contains restrictive covenants that may limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our debt.

We and our subsidiaries may be able to incur substantial additional indebtedness in the future. The terms of the credit agreement govern our debt limit, but do not prohibit, us or our subsidiaries from incurring additional indebtedness, and any additional indebtedness incurred in compliance with these restrictions could be substantial. If we incur any additional debt, the priority of that debt may impact the ability of existing debt holders to share ratably in any proceeds distributed in connection with any insolvency, liquidation, reorganization, dissolution or other winding-up of us, subject to collateral arrangements. These restrictions will also not prevent us from incurring obligations that do not constitute indebtedness. We also have the ability to request incremental loans on the same terms under the existing senior secured credit facility up to the greater of $1.0 billion and 100% of consolidated EBITDA and may incur additional incremental loans so long as the senior secured net leverage ratio does not exceed 4.25 to 1.0, subject to certain additional conditions and commitments by existing or new lenders to fund any additional borrowings. If new indebtedness is added to our current debt levels, the related risks that we and our subsidiaries now face could intensify.

Our ability to make scheduled payments due on our debt obligations or to refinance our debt obligations depends on our financial condition and operating performance, which are subject to prevailing economic, industry and competitive conditions and to certain financial, business, legislative, regulatory and other factors beyond our control as discussed above. Our total scheduled principal repayments of debt made in 20212023 and 20202022 were $54.8$100.0 million and $58.8$114.5 million, respectively. Our total interest expense for 20212023 and 20202022 was $112.6$288.2 million and $126.3$230.9 million, respectively. We may be unable to maintain a level of cash flow from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness.

If our cash flow and capital resources are insufficient to fund our debt service obligations, we could face substantial liquidity problems and could be forced to reduce or delay investments and capital expenditures or to dispose of material assets or operations, seek additional debt or equity capital or restructure or refinance our indebtedness. We may not be able to implement any such alternative measures on commercially reasonable terms or at all and, even if successful, those alternative actions may not allow us to meet our scheduled debt service obligations. The credit agreement governing Trans Union LLC’s senior secured credit facility restricts our ability to dispose of assets and use the proceeds from those dispositions and may also restrict our ability to raise debt or equity capital to be used to repay other indebtedness when it becomes due. We may not be able to consummate those dispositions or to obtain proceeds in an amount sufficient to meet any debt service obligations then due. In addition, under the covenants of the credit agreement governing our senior secured credit facility, TransUnion Intermediate Holdings, Inc. is restricted from making certain payments, including dividend payments to TransUnion, subject to certain exceptions.

If we cannot make our scheduled debt payments, we will be in default and all outstanding principal and interest on our debt may be declared due and payable, the lenders under Trans Union LLC’s senior secured credit facility could terminate their commitments to loan money, Trans Union LLC’s secured lenders (including the lenders under Trans Union LLC’s senior

Risks Related to Ownership of Our Common Stock

Our stock price has recently been volatile and has declined due to a number of factors, including the deteriorating macroeconomic environment, changing expectations about our future revenue and operating results, and softening of the forward-looking guidance we have provided. The trading price of our common stock has been and may continue to be volatile. The stock market routinely experiencesfinancial markets have at various times experienced significant price and volume fluctuations that are often unrelatedhave impacted the stock prices of many companies in the broader markets and in our industry in particular. These broad market and industry-specific fluctuations, as well as deteriorating macroeconomic conditions, could have a material adverse effect on our results of operations, financial condition and stock price. We reconcile the fair value of our reporting units to our market capitalization during our annual goodwill impairment test, which we conduct more frequently if events or disproportionate tocircumstances indicate that the operating performancecarrying value of goodwill may be impaired. A further decrease in our market capitalization could be an indicator that one or more of our reporting units has a goodwill impairment. During the underlying businesses. three months ended September 30, 2023, we identified a triggering event requiring an interim impairment assessment for our United Kingdom reporting unit, which resulted in a goodwill impairment of $414 million.

This market volatility, as well as general economic, market or political conditions, could adversely affect the market price of our common stock, regardless of our actual operating performance, and you may not be able to resell your shares at or above the price you paid. In addition to the risks described in this section, several factors that could cause the price of our common stock to fluctuate significantly include, among others, the following, most of which we cannot control:

In addition, price volatility may be greater if the public float and trading volume of our common stock is low, and the amount of public float on any given day can vary depending on whether our stockholders choose to hold their shares for the long term.

Certain provisions of our third amended and restated certificate of incorporation (“Charter”) and thirdfourth amended and restated bylaws may have an anti-takeover effect and may delay, defer or prevent a merger, acquisition, tender offer, takeover attempt or other change of control transaction that a stockholder might consider in its best interest, including those attempts that might result in a premium over the market price for the shares held by our stockholders.

These provisions provide for, among other things:

The anti-takeover provisions discussed above could make it more difficult for a third party to acquire us, even if the third party’s offer may be considered beneficial by many of our stockholders. As a result, our stockholders may be limited in their ability to obtain a premium for their shares.

OnIn February 13, 2018, we announced that our board of directorsBoard approved a dividend policy pursuant to which we intend to pay quarterly cash dividends on our common stock. The terms of our senior secured credit facility impose certain limitations on our ability to pay dividends. We may, however, declare and pay cash dividends up to an unlimited amount unless a default or event of default exists under the senior secured credit facility. Any determination to pay dividends in the future will be at the discretion of our board of directorsBoard and will depend upon results of operations, financial condition, contractual restrictions, restrictions imposed by applicable law and other factors our board of directorsBoard deems relevant.

General Risks

Our success depends on our ability to attract and retain experienced management, sales, research and development, analytics, marketing and technical support personnel. If any of our key personnel were unable or unwilling to continue in their present positions, it may be difficult to replace them and our business could be seriously harmed. If we are unable to find qualified successors to fill key positions as needed, our business could be seriously harmed. The complexity of our services requires trained customer service and technical support personnel. We may not be able to hire and retain such qualified personnel at compensation levels consistent with our compensation structure. Some of our competitors may be able to offer more attractive terms of employment. In addition, we invest significant time and expense in training our employees, which increases their value to competitors who may seek to recruit them. If we fail to retain our employees, we could incur significant expense replacing employees and our ability to provide quality services could diminish, resulting in a material adverse effect on our business.

We are subject to federal, state and local income and other taxes in the United States and in foreign jurisdictions. From time to time the United States federal, state, local and foreign governments make substantive changes to tax rules and the application thereof, which could result in materially different corporate taxes than would be incurred under existing tax law or interpretation and could adversely impact profitability. Governments have strengthened their efforts to increase revenues through changes in tax law, including laws regarding transfer pricing, economic presence and apportionment to determine the tax base.

Consequently, significant judgment is required in determining our worldwide provision for income taxes. Our future effective tax rates and the value of our deferred tax assets could be adversely affected by changes in tax laws. In addition, we are subject

ITEM 2. PROPERTIES

Properties

Our corporate headquarters and main data center are located in Chicago, Illinois in an office building that we own. As of December 31, 2021,2023, we lease space in over 100110 other locations, including office space and additional data centers. These locations are geographically dispersed to meet our sales and operating needs. We anticipate that suitable additional or alternative space will be available at commercially reasonably terms for future expansion.

See Part II, ITEM 8 “FINANCIAL STATEMENTS AND SUPPLEMENTARY DATA“Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 22,23, “Contingencies” for information regarding our legal proceedings.

ITEM 4. MINE SAFETY DISCLOSURES

INFORMATION ABOUT OUR EXECUTIVE OFFICERS

Prior to joining TransUnion, Mr. Cartwright was the Chief Executive Officer of Decision Insight Information Group, a portfolio of independent businesses providing real property information, software and services to insurance, finance, legal and real estate professionals in the United States, Canada and Europe. Mr. Cartwright also spent almost 14 years at Wolters Kluwer, a global information services and workflow solutions company, where he held a variety of executive positions of increasing responsibility.responsibility, culminating in CEO of the Corporate and Financial Services Division and Shared Services, North America. Prior to Wolters Kluwer, he was Senior Vice President, Strategic Planning & Operations for Christie’s Inc. and Strategy Consultant for Coopers and Lybrand.

Mr. Cartwright earned his bachelor's degree in business administration and hisa master's in public accountancy from The University of Texas at Austin. He serves on the Board of Directors of P33 Chicago and the Board of Trustees of the Museum of Science and Industry.

Prior to joining Neustar in 2016, Mr. Achanta was Chief Data Officer and Head of Data and Analytics at Walmart, beginning in 2014, leading all data and analytics delivery platforms across the company globally. While at Walmart, he spearheaded the data fabric, advanced analytics platforms and decision services groups. Prior to Walmart, Mr. Achanta was Global Head of Analytics and Big Data at AIG. Mr. Achanta also has held senior leadership positions in technology and data and& analytics at Capital One and Experian.

Mr. Achanta earned his Bachelor of Science degree in Computer Science and Engineering from Andhra University in India and his M.B.A. from UCLA’s Anderson School of Management.

December 2008, overseeing financial operations of the U.S. Information Services segment. Mr. Cello also serves on the University of Illinois at Chicago’s College of Business Advisory Council.

Mr. Cello earned his bachelor’s degree in Accounting from University of Illinois at Chicago and is a certified public accountant.

Prior to joining TransUnion in September 2009, Mr. Martin was President and Chief Operating Officer of HSBC Auto Finance where he had direct profit &and loss responsibility for all strategy, business development, sales, marketing, pricing, risk management, underwriting operations, customer service and collections. Prior to joining HSBC, he was a consultant with Booz Allen Hamilton (now PWC Strategy&) from 1998 to 2003, and senior marketing analyst with American Airlines from 1992 to 1996. Mr. Martin serves on the board of Juvenile Diabetes Research Foundation of South Florida and the Child Rescue Coalition.

Mr. Martin earned his B.S. in Management from Purdue University and his M.B.A. from the University of Michigan Business School.

Mr. Mauldin has an extensive background in the information solutions industry. Prior to joining TransUnion, he served as Chief Executive Officer of Screening Solutions and Customer Operations for LexisNexis Risk Solutions, a division of Reed Elsevier. PriorOther roles at LexisNexis includedwere Vice President of Total Customer Experience and Vice President of Collections Market Planning. He also held management positions at Commercial Financial Services and Experian.

Mr. Mauldin earned his bachelor’s degree in Journalism from the University of Oklahoma.

Ms. Muigai brings deep expertise in talent strategy with an extensive background in global HR, human capital management, organizational leadership, diversity and inclusion, legal and compliance, business transformation and more. She previously spent 16 years at Walmart, based in the U.S., Canada and India, serving as Senior Vice President, People from March 2020 to September 2021, Executive Vice President People/Corporate Affairs, Walmart Canada from August 2016 to August 2020, Senior Vice President People, Walmart Canada from January 2016 to July 2016, Vice President People, Walmart Canada from February 2015 to December 2015, Vice President, International Real Estate and Vice President International Real Estate, Walmart International Real Estate from March 2014 to February 2015, Senior Vice President Legal, General Counsel & Chief Ethics Officer, Walmart India from November 2012 to March 2014, Vice President Audit, Walmart Canada from September 2009 to October 2012, and Senior Director, Risk Management, Walmart Canada from June 2005 to September 2009. She previously worked at Lang Michener LLP.

Ms. Muigai earned her Bachelor of Law from the University of Windsor in Canada, and her Master of Law in International Business from the University of London, and her Bachelor of Law from the University of Windsor in Canada.London. She sitsserves on the Boardboard of directors of Coursera, Inc. (NYSE: COUR) and Breakfast Club of Canada and previously sat on the boards of MassMart Holdings Ltd and the Walmart Foundation.Canada.

responsible for legal, risk, compliance, government and regulatory relations, corporate governance, consumer privacy and ESG functions for TransUnion and its subsidiaries around the world. Prior to joining the Company in 2018, Ms. Russell was a partner at the law firm of Buckley, LLP, from October 2016 until May 2018, where she led the firm’s Financial Institutions Regulation, Supervision and FinTech practices. Previously, she served as Executive Vice President, Chief Legal Officer and Corporate Secretary at Fifth Third Bank from September 2015 until July 2016. From July 2011 until August 2015, Ms. Russell wasBank. Prior to that, she served as Managing Director and Global Head of Public Policy and Regulatory Affairs at Bank of New York Mellon. Prior to that, she spent five yearsMellon, and as Senior Vice President and Associate General Counsel at Bank of America andAmerica. She also spent eight years at Skadden in Washington, D.C. and London focused on financial services, corporate finance, and mergers and acquisitions.

Ms. Russell earned her B.A. from the College of William & Mary and her J.D. with honors from American University’s Washington College of Law, where she received the Outstanding Graduate Award. Ms. Russell serves on the board of directors of the U.S. Chamber of Commerce, the world’s largest business organization, representing the interests of over three million businesses and organizations. She is also on the boards of Illinois Legal Aid Online and the Chicago Council on Global Affairs which advances policy solutionswhere she chairs the board’s Nominating and fosters dialogue on critical global issues. She is also a board member of Illinois Legal Aid Online and serves in fundraising advisory roles for the National Women’s Law Center, Pitch Your Peers Chicago and the National Immigrant Justice Center.Governance Committee.

Our executive officers are elected annually by our board of directors.Board. There are no family relationships among any of the Company’s executive officers.

Our common stock has been listed on The New York Stock Exchange under the symbol “TRU” since June 25, 2015.

As of January 31, 2022,2024, we had 1512 stockholders of record. We have a greater number of beneficial owners of our stock who own their shares through brokerage firms and other nominees.

None.

The following graph shows a comparison of cumulative total shareholder return for the Company’s common stock, the Russell 3000 and the Dow Jones U.S. Financials Index. The graph assumes that $100 was invested at market close on December 31, 2016,2018, in each of the Company’s common stock, the Russell 3000 and the Dow Jones U.S. Financial Index. The cumulative total returns for the Russell 3000 and the Dow Jones U.S. Financial Index assume reinvestment of dividends. The stock price performance of the following graph is not necessarily indicative of future stock price performance.

The following discussion and analysis of TransUnion’s financial condition and results of operations is provided as a supplement to, and should be read in conjunction with Part I, Item 1A, “Risk Factors,” and Part II, Item 8, “Financial Statements and Supplementary Information,” including TransUnion’s audited consolidated financial statements and the accompanying notes. In addition to historical data, this discussion contains forward-looking statements about our business, operations and financial performance based on current expectations that involve risks, uncertainties and assumptions. Our actual results may differ materially from those discussed in the forward-looking statements as a result of various factors, including but not limited to those discussed in “Cautionary Notice Regarding Forward-Looking Statements” and Part I, Item 1A, “Risk Factors.”

References in this discussion and analysis to the “Company,” “we,” “us,” and “our” refer to TransUnion and its direct and indirect subsidiaries, including TransUnion Intermediate Holdings, Inc.

We manage our business and report our financial results including disaggregated revenue, in three reportable segments: U.S. Markets, International and Consumer Interactive. See Part II, Item 8 “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statement,” Note 21, “Reportable Segments” for additional information.

TheOur U.S. Markets segment provides consumer reports, actionable insights and analytics to businesses. These businesses use our services to engage and acquire customers, assess consumers’consumer ability to pay for services, identify cross-selling opportunities, measure and manage debt portfolio risk, collect debt, verify consumer identities and mitigate fraud risk. The core capabilities and delivery methods in our U.S. Markets segment allow us to serve a broad set of customers across industries. We report disaggregated revenue of our U.S. Markets segment for Financial Services and Emerging Verticals. The results of operations of Neustar are included in the Emerging Verticals and our consolidated statements of income since the date of the acquisition.

The International segment provides services similar to our U.S. Markets segment to businesses in select regions outside the United States. Depending on the maturity of the credit economy in each country, services may include credit reports, analytics and technology solutions services and other value-added risk management services. We also have insurance, business and automotive databases in select geographies. These services are offered to customers in a number of industries including financial services, retail credit, insurance, automotive, collections, public sector and communications, and are delivered through both direct and indirect channels. The International segment also provides consumer servicessolutions similar to those offered by our Consumer Interactive segment thatto help consumers proactively manage their personal finances.

The Consumer Interactive segment offers solutions that help consumers manage their personal finances and take precautions against identity theft. Services in this segment include credit reports and scores, credit monitoring, identity protection and resolution, and financial management for consumers. The segment also provides solutions that help businesses respond to data breach events. Our products are provided through user-friendly online and mobile interfaces and are supported by educational content and customer support. Our Consumer Interactive segment serves consumers through both direct and indirect channels. The results of operationsWith our acquisition of Sontiq, are included in the Consumer Interactive segment andwe have added to our consolidated statementsfoundational credit monitoring solutions with a comprehensive set of income since the date of the acquisition.identity protection offerings.

Our revenues and results of operations have been and can be significantly influenced by general macroeconomic conditions, including the impact of the global COVID-19 pandemic,but not limited to, interest rates, inflation, housing demand, the availability of credit and capital, interest rates, inflation, employment levels, and consumer confidence.

During 2022, the labor market remained strong and supply chain constraints began to ease, while persistent inflation, rapidly increasing energy prices, and consecutive interest rate increases by the Federal Reserve all contributed to constrained economic activity. In addition, a slowing housing market, coupled with lower GDP growth, softening consumer confidence and global geopolitical events added to the deterioration of global macroeconomic conditions and increasing recession fears compared to the post-pandemic rebound of 2021.

During 2023, the U.S. labor market remained steady with low unemployment and rising real wages. However, subsiding but still elevated inflation, increasing housing demand. During 2020,costs, and continued interest rate increases by the Federal Reserve all contributed to constrained economic effectactivity. In addition, liquidity challenges within the banking sector, a slowing housing market, and global geopolitical events all added to the deterioration of global macroeconomic conditions compared with the COVID-19 pandemicpost-pandemic rebound of 2021 and early 2022. These slowing macroeconomic conditions had a materialmore pronounced impact in our developed markets, including the U.K., compared with our emerging markets. The U.K. experienced persistently unfavorable and adverseworsening macroeconomic conditions, including rising interest rates, subsiding but still elevated inflation, and a slowing labor market. In addition, the impact of exchange rates continued to have a significant impact on numerous aspectsour International segment. In the U.S., the impact of our business, including our resultshigher interest rates has slowed demand for consumer loans and auto loans, and has been particularly acute in the housing sector, where higher borrowing rates significantly impact both home affordability, driving down purchase activity, and demand for mortgage loan refinancing. The impact of operationshigher interest rates on slowing aggregate demand is expected to result in all ofincreased unemployment levels over the markets where we operate. During 2021, we saw steady improvements in our results of operations in all these markets. This dynamic impactsnext year, which is likely to reduce consumer credit activity. These dynamics impact the comparability of our results of operations, including our revenue and expenses, for each ofexpense, between the periods presented below. Also, given

The following developments impact the comparability of our balance sheets, results of operations and cash flows between years:

On December 23, 2021, we entered into a tranche of interest rate swap agreements with various counter-partiescounterparties that effectively fix our LIBOR exposure on a portion of our Senior Secured Term Loan or similar replacement debt. The tranche commenced on December 31, 2021, and expires on December 31, 2026, with a current aggregate notional amount of $1,600.0$1,568.0 million that amortizes each quarter. The tranche requires TransUnionus to pay fixed rates varying between 1.428%1.3800% and 1.4360%1.3915% in exchange for receiving a variable rate that matches the variable rate on our loans. We have designated these swap agreements as cash flow hedges.

On December 17, 2021, we completed the sale of our Healthcare business. The Healthcare business met the criteria for discontinued operations at December 31, 2021, as the sale represented a strategic shift in our business that will have a major effect on our results of operations. The results of operations are classified as discontinued operations, net of tax, in our consolidated statementConsolidated Statements of incomeOperations for all periods presented. Discontinued operations, net of tax, also includes a gain on the disposaldivestiture of the Healthcare business of $982.5 million, net of tax, in the consolidated statementsConsolidated Statements of incomeOperations for 2021. All tables and discussions below exclude the impact of the Healthcare business.

On December 1, 2021, we entered into an agreement to amend certain provisions of the Senior Secured Credit Facility and exercise our right to draw additional debt in an amount of $3,100.0 million, less original issue discount and deferred financing fees of $7.8 million and $43.6 million, respectively. Proceeds from the incremental loan on the Senior Secured Credit Facility were used to finance the acquisition of Neustar.

On December 1, 2021, we entered into a Second Lien Credit Agreement to obtain term loans in an aggregate amount of $640.0 million (the “Second Lien Term Loan”), less original issue discount and deferred financing fees of $3.2 million and $14.3 million, respectively, used to fund the acquisition of Sontiq. On December 23, 2021, we fully repaid the Second Lien Term Loan using a portion of the proceeds from our sale of the Healthcare business. As a result of the prepayment, we expensed the unamortized original issue discount and deferred fees to other income and expense in the consolidated statementConsolidated Statements of income.Operations.

Revenue

The following is a more detailed description of how we derive andWe report revenue for our three reportable segments:

Cost of Services

Costs of services include data acquisition and royalty fees, personnel costs related to our databases and software applications, consumer and call center support costs, hardware and software maintenance costs, telecommunication expenses and occupancy costs associated with the facilities where these functions are performed.

Selling, General and Administrative

Selling, general and administrative expenses include personnel-related costs for sales, administrative and management employees, costs for professional and consulting services, advertising and occupancy and facilities expense of these functions.

Non-Operating Income and Expense

Non-operating income and expense includes interest expense, interest income, earnings from equity-method investments, dividends from cost-method investments,Cost Method Investments, fair-value adjustments of equity-methodequity method and Cost Method investments,Investments, if any, expenses related to successful and unsuccessful business acquisitions, loan fees, debt refinancing expenses, certain acquisition-related gains and losses and other non-operating income and expenses.

For the twelve months ended December 31, 2023, 2022 and 2021, 2020 and 2019, these key performance indicatorsour results of operations were as follows: