Does TransUnion require consent?

Yes. TransUnion digital marketing scripts perform identity resolution, linking online behavior to offline credit bureau and demographic profiles. Explicit consent for both marketing and analytics data processing is required before the tracking pixel or beacon fires.

What data does TransUnion collect from my site?

TransUnion captures device identifiers, IP address, browser fingerprint, page URLs, and behavioral signals. These are matched against the TransUnion consumer identity graph to build enriched audience segments shared with advertising platforms like The Trade Desk and DV360.

How does ConsentStack handle TransUnion?

ConsentStack blocks the TransUnion beacon until the visitor grants explicit marketing and analytics consent. Once granted, the script loads and begins identity resolution. This prevents unauthorized profiling before consent is confirmed.

What tracker domains does TransUnion use?

ConsentStack has catalogued tracker domains for TransUnion including agkn.com, iesnare.com and btstatic.com, among 4 in total. These are the network destinations TransUnion's scripts contact, which a consent platform blocks until a visitor agrees.

TransUnion (agkn.com) - Consumer Data Privacy & Consent

Back to Vendor Library

Overview

TransUnion is one of the three major US consumer credit bureaus and has expanded significantly into digital identity resolution and marketing data services. Its digital marketing arm (formerly TruAudience, built through acquisitions including TruSignal and Tru Optik) provides data enrichment, identity resolution, and audience targeting services to advertisers. TransUnion's scripts collect online behavioral signals from publisher and advertiser websites and link them to TransUnion's consumer identity graph — a database of offline consumer attributes including demographics, purchase history, financial behavior, and credit-inferred lifestyle segments. This combination of online behavioral data with offline credit bureau data makes TransUnion's digital marketing offering among the most comprehensive and privacy-sensitive in the industry.

What This Script Does

TransUnion's digital marketing scripts (often distributed via demand-side platforms, data management platforms, or direct publisher integrations) operate as data collection and identity resolution beacons.

Script behavior:

Drops a tracking pixel or JavaScript beacon on page load that fires to TransUnion's data collection infrastructure
Captures device-level identifiers: IP address, user agent, browser fingerprint signals
Sets cookies to establish a persistent cross-session identifier for the visiting device
Collects behavioral signals: page URL, page category, content type, visit timestamp, referrer
For e-commerce sites: product category, price range, and purchase intent signals from product pages

Cookies set:

Persistent first-party or third-party cookies (depending on deployment) with multi-month expiry storing TransUnion's device-level identifier
Identity resolution cookies that link the current browser to TransUnion's existing consumer identity records

Identity resolution pipeline:

The collected device identifier is matched against TransUnion's identity graph using deterministic matching (hashed email if available) or probabilistic matching (IP, device fingerprint, behavior patterns)
Matched records are enriched with TransUnion's offline consumer attributes: estimated income range, household size, life stage, purchase behavior categories, and credit-inferred financial segments
Enriched audience segments are made available to advertisers for programmatic targeting via DSPs

Data sharing:

Audience segment data is shared with advertising platforms (The Trade Desk, DV360, Amazon DSP, etc.) for programmatic ad targeting
Attribution data is shared back to advertiser clients to measure campaign effectiveness against offline outcomes (in-store purchases, financial product applications)

IAB TCF purposes: Purpose 1 (Store/access device), Purpose 2 (Select basic ads), Purpose 3 (Create personalised ads profile), Purpose 4 (Select personalised ads), Purpose 7 (Measure ad performance), Special Purpose 1 (Ensure security).

Consent & Compliance

TransUnion's digital marketing scripts require explicit consent and represent one of the highest-risk consent categories on this platform. The combination of online behavioral tracking with offline credit bureau and consumer data constitutes sensitive profiling under GDPR. Under GDPR Articles 6 and 9, linking online behavior to financial and demographic attributes from credit bureau records likely constitutes special category-adjacent profiling requiring a strong legal basis. The Article 29 Working Party (now EDPB) has consistently found that data broker profiling requires explicit consent, not legitimate interest.

Under CCPA/CPRA, identity resolution and the sharing of enriched consumer profiles with advertisers constitutes both "selling" and "sharing" of personal information, triggering opt-out rights. TransUnion as a data broker is separately regulated under California's data broker registry requirements.

Under ePrivacy, the tracking pixels and persistent cookies fire without functional necessity — explicit prior consent is required.

TransUnion participates in the EU-US Data Privacy Framework for transatlantic data transfers.

Should You Block This Without Consent?

Yes. TransUnion's scripts perform identity resolution linking online behavior to offline consumer credit and demographic profiles, then share enriched audience data with advertising platforms. This is among the most privacy-sensitive forms of data processing encountered in the browser. Block until explicit consent for marketing and analytics data processing is granted.

Is TransUnion GDPR compliant?

TransUnion typically loads marketing and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So TransUnion can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads TransUnion, not on TransUnion itself.

Visit website

Consent Categories

Marketing Analytics

Also Known As

TransUnion digitalidentity resolutionconsumer data platformTruAudienceTransUnion marketing

Industries

Computers Electronics and Technology

Tracked Domains (4)

TransUnion's trackers are common, seen on about 5% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.

agkn.comMarketing

agkn.com is a marketing domain operated by TransUnion, used to serve ads, build audiences, and measure ad conversions. Seen on about 5% of scanned sites.

iesnare.comEssential

iesnare.com is an essential domain operated by TransUnion, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

btstatic.comMarketing

btstatic.com is a marketing domain operated by TransUnion, used to serve ads, build audiences, and measure ad conversions. Seen on a small share of scanned sites.

thebrighttag.comMarketing

thebrighttag.com is a marketing domain operated by TransUnion, used to serve ads, build audiences, and measure ad conversions. Seen on a small share of scanned sites.