Credit Bureaus & Data Brokers · Nationwide consumer reporting agency (credit bureau) · Regulatory action + Private litigation + Data breach
Experian
Headline
The CFPB is still suing Experian, filed January 2025 in C.D. Cal. No. 8:25-cv-00024, over how it handles credit-report disputes.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The CFPB is still suing Experian, filed January 2025 in C.D. Cal. No. 8:25-cv-00024, over how it handles credit-report disputes. The Bureau alleges Experian deferred to lenders' and other furnishers' say-so instead of investigating, and put deleted errors back on reports. Unlike several other CFPB cases from that period, this one was not dropped. The court ordered Experian to answer in October 2025, and discovery was ongoing as of the CFPB's March 2026 update. Experian's U.S. privacy notice openly states it has 'disclosed and sold personal information about you to third parties', and that list includes sensitive data such as government ID numbers and precise geolocation. Consumers who sign up for Experian's free credit products can be bound by an arbitration clause that federal appeals courts have enforced against FCRA claims.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-16
Primary source. www.consumerfinance.gov/enforcement/actions/experian-information-solutions-inc/ — Unverified - heuristic first draft.
Terms
Arbitration
Likely YES for consumer-product users, but the current consumer terms text was not retrieved this pass. Third Circuit in Young v. Experian Info. Sols., No. 23-2953 (3d Cir. Oct. 17, 2024): the Experian Consumer Services (CreditWorks) agreement covers disputes with ECS 'or its affiliates, including … Experian', expressly reaches FCRA claims, and delegates scope to the arbitrator. Courts have compelled arbitration: Stover v. Experian Holdings (9th Cir. 2020); Fourth Circuit Austin v. Experian (reported Aug. 2025). The class waiver and its exact wording were not verified this pass. The site-level Legal Terms page has no arbitration clause.
Data sharing
SELLS DATA, INCLUDING SENSITIVE CATEGORIES: the U.S. Consumer Data Privacy Notice (last updated June 24, 2026) says 'we have disclosed and sold personal information about you to third parties for business or commercial purposes'. It marks sensitive personal information (government ID numbers, account credentials, precise geolocation, racial/ethnic characteristics) as sold, shared or disclosed. The notice excludes a listed set of states, which was not detailed this pass. Recipients span auto, financial, insurance, healthcare-product, retail, media, telecom and government sectors, and a third-party list is at experian.com/privacy/thirdparties. Opt-out is through consumerprivacy.experian.com, 833-210-4615, or mail to PO Box 703, Allen, TX 75013. Experian says opting out does not affect the credit report itself.
Fees and billing
2017 CFPB order (2017-CFPB-0012) found Experian marketed consumer credit scores as ones lenders use when lenders did not use them; $3M civil penalty. Per Wikipedia (not primary-verified this pass), a 2005 FTC settlement alleged 'free credit report' ads did not adequately disclose automatic enrollment in a $79.95 monitoring program. Current subscription and auto-renewal terms for Experian's paid products were not retrieved this pass.
Contacts
Privacy contact. Chief Privacy Officer, Compliance Department, Experian, 475 Anton Blvd., Costa Mesa, CA 92626; optout@experian.com; 833-210-4615
Legal notice. Not verified this pass. The privacy-contact address is Experian, 475 Anton Blvd., Costa Mesa, CA 92626, but it is not confirmed as an address for service. Use the state registered-agent search for Experian Information Solutions, Inc.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| Regulator enforcement page · 2026-03-13 www.consumerfinance.gov/enforcement/actions/experian-information-solutions-inc/ | whole row | Unassigned | confirmed | “Discovery is ongoing.” Quote basis: not recorded. |
| News · 2025-09-05 www.mlex.com/mlex/articles/2385316 | whole row | Unassigned | confirmed | “Experian moves to dismiss US CFPB's amended claims” Quote basis: not recorded. |
| Regulator enforcement page · 2017-03-23 www.consumerfinance.gov/enforcement/actions/experian-holdings-inc-experian-information-solutions-inc-and-consumerinfocom-inc-dba-experian-consumer-services/ | whole row | Unassigned | confirmed | “lenders did not use Experian's scores to make those decisions” Quote basis: not recorded. |
| Company privacy policy · 2026-06-24 www.experian.com/privacy/us-consumer-data-privacy-policy | whole row | Unassigned | confirmed | “we have disclosed and sold personal information about you to third parties for business or commercial purposes” Quote basis: not recorded. |
| Company privacy page · 2026-10-16 www.experian.com/privacy/ | whole row | Unassigned | confirmed | “You can choose to opt-out of the sale of your personal information and data.” Quote basis: not recorded. |
| Company terms · 2026-10-16 www.experian.com/corporate/legalterms | whole row | Unassigned | confirmed | No quote recorded. Quote basis: not recorded. |
| Court opinion · 2024-10-17 www2.ca3.uscourts.gov/opinarch/232953p.pdf | whole row | Unassigned | confirmed | “[a]ll issues are for the arbitrator to decide” Quote basis: not recorded. |
| Law firm summary · 2020-10 www.carltonfields.com/insights/blogs/reinsurance-focus/imported/ninth-circuit-website-visit-four-years-after-assent-to-a-contract-containing-a-change-of-terms-provi | whole row | Unassigned | confirmed | No quote recorded. Quote basis: not recorded. |
| Trade press · 2025-08-04 www.accountsrecovery.net/appeals-court-overturns-ruling-says-arbitration-agreement-must-be-enforced-in-fcra-case/ | whole row | Unassigned | confirmed | “did not need to 'scroll down' or 'go exploring'” Quote basis: not recorded. |
| Wikipedia (lead only) · 2026-10-16 en.wikipedia.org/wiki/Experian | whole row | Unassigned | confirmed | No quote recorded. Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://www.experian.com/privacy/us-consumer-data-privacy-policy | Not fetched yet | NOT CONFIRMED |
| Terms of service https://www.experian.com/corporate/legalterms | Not fetched yet | NOT CONFIRMED |
| Website https://www.experian.com | Not fetched yet | — |
| Primary source https://www.consumerfinance.gov/enforcement/actions/experian-information-solutions-inc/ Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
| Action | Amount | Link |
|---|---|---|
| CFPB v. Experian Information Solutions, Inc. Consumer Financial Protection Bureau, 2025 No. 8:25-cv-00024 (C.D. Cal. filed Jan. 7, 2025); second amended complaint Aug. 22, 2025; MTD denied Oct. 22, 2025; answer Nov. 3, 2025. | — | proposed |
Links are proposed matches, not yet reviewed.
State statute
Headquarters on file: CA. Provisions of CCPA/CPRA on file:
| Provision | Type | Source |
|---|---|---|
| Right to Deletion Cal. Civ. Code § 1798.105 | hard | source |
| Right to Correction Cal. Civ. Code § 1798.106 | hard | source |
| Right to Know / Access Cal. Civ. Code § 1798.110 | hard | source |
| Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027 | hard | source |
| Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii) | hard | source |
| Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011 | hard | source |
| Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae) | hard | source |
| Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051 | hard | source |
| Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d) | threshold | source |
| Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157 | hard | source |
| Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135 | hard | source |
| Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah) | hard | source |
| Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206 | hard | source |
| Notice at Collection Cal. Code Regs. tit. 11, § 7012 | hard | source |
| Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124 | hard | source |
| Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16) | hard | source |