TransUnion

Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures as of the end of the period covered by this report. The term “disclosure controls and procedures” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms.

Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its principal executive and principal financial officers, as appropriate, to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives, and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures. Based on the evaluation of our disclosure controls and procedures as of June 30, 2024, our Chief Executive Officer and Chief Financial Officer concluded that, as of such date, our disclosure controls and procedures were not effective because of the material weakness in internal control over financial reporting discussed below.

Material Weakness in Internal Control Over Financial Reporting

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of ourannual or interim financial statements will not be prevented or detected on a timely basis. As previously disclosed in our Annual Report on Form 10-K for December 31, 2023, we have identified the following material weakness, which remains unremediated as of June 30, 2024:

We did not design and maintain effective controls over the classification of certain costs between cost of services and selling, general and administrative in the Consolidated Statements of Operations. This material weakness resulted in an error in the classification of certain costs between cost of services and selling, general and administrative, and the revision of the annual financial statements previously issued for 2022 and 2021 and the unaudited interim financial statements previously issued for the 2023 and 2022 interim periods.

Additionally, this material weakness could result in misstatements of the aforementioned accounts or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

Management’s Remediation Efforts on Classification of Certain Costs between Cost of Services and Selling, General and Administrative Material Weakness

Management is in the process of designing and implementing remediation plans to address the material weakness related to the classification of certain costs between cost of services and selling, general and administrative in the Consolidated Statements of Operations. As part of our remediation activities, we are (1) enhancing our policy for classification of expenses, (2) implementing additional communications and training, (3) improving the process of validating costs to ensure appropriate classification of expenses, and (4) implementing additional controls to monitor the recording of costs across cost of services and selling, general and administrative.

Changes in Internal Controls over Financial Reporting

During the quarter covered by this report, there have been no changes in our internal controls over financial reporting that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.