---

---

•	U.S. Information Solutions (USIS) — provides consumer and commercial information solutions to businesses in the U.S. including online information, decisioning technology solutions, fraud and identity management services, analytical services, portfolio management services, mortgage reporting and marketing services.

•	International — provides products and services similar to those available in the USIS operating segment but with variations by geographic region. We also provide information, technology and services to support debt collections and recovery management. This operating segment is comprised of our Canada, Europe, Latin America and Asia-Pacific business units.

•

Workforce Solutions — provides services enabling customers to verify income and employment (Verification Services) of people in the U.S., as well as providing our customers services to outsource and automate the performance of certain payroll-related and human resource management business processes, including unemployment claims management, tax credits and incentives and I-9 and W-2 form management services and services to allow employers to ensure compliance with the Affordable Care Act (Employer Services). Workforce Solutions is in the process of establishing Verifications Services operations in Canada and Australia.

•	Global Consumer Solutions — provides products to consumers in the U.S., Canada and the U.K., enabling them to understand and monitor their credit and monitor and help protect their identity. We also sell consumer credit information to resellers who combine our information with other information to provide direct-to-consumer monitoring, reports and scores.

---

•

Lead our industry in data security. Building on the progress we made following the 2017 cybersecurity incident, we are focused on becoming a leader in our industry in the effectiveness of our data and technology security practices. This includes building an Equifax culture that considers data and technology security, and more broadly risk management, as a primary requirement in all decisions. This also includes the extensive use of advanced data and technology security tools, techniques, services and processes in order to enhance our ability to protect the information with which we are entrusted from fraudulent access.

•

Transform our technology. We plan to rebuild our technology infrastructure, accelerate our migration to a public cloud environment, employ virtual private cloud deployment techniques, and rationalize and rebuild our application portfolio using cloud-focused services. This technology transformation is a significant enabler to our goal of leading our industry in data and technology security capability. Our goal is to deliver market-leading capabilities to our customers in terms of speed of bringing new products and services to market; ease of customer and partner implementation and integration; ease of consumer access to and interaction with Equifax, our systems and data; system resiliency and uptime; and ultimately cost to serve. We are approximately one year into our multi-year technology transformation, which is already broadly impacting our internal and external information technology systems.

•

Lead in data and analytics, to develop unparalleled analytical insights leveraging Equifax’s unique data. We use proprietary advanced analytical platforms, including capabilities in machine learning and advanced visualization tools, to leverage our unique data to develop leading analytical insights that enhance the precision of our customers’ decisioning activities. We strive to continue to advance these capabilities through ongoing data monetization activities, the acquisition of distinctive and differentiated assets, and continued advancement of capabilities in artificial intelligence and machine learning. As part of our technology transformation, we are investing to simplify our customers’ access to our leading analytical platforms, in order to speed the development of unique insights and the conversion of these insights into new products and services consumable by our customers through our delivery platforms.

---

•

Improve the consumer user experience. Equifax understands the importance of providing consumers with user-friendly capabilities to see, understand and question their consumer credit file and information. As part of our technology transformation, we are rebuilding our digital and call center technology infrastructure to provide an experience focused on making consumers’ interactions with Equifax as effective and efficient as possible.

•

Foster a culture of customer centricity. We are focused on building a culture in which the customer is at the center of our decision processes, and we exceed customer expectations by delivering solutions with speed, flexibility, stability and performance. Our focus on customer centricity will enable us to be more proactive in solving problems better and faster for customers while delivering enhanced operational readiness to provide a better customer experience.

•

Deliver growth while enhancing profitability and shareholder returns. We strive to accelerate innovation through expanded customer focus and collaboration. We intend to leverage our unique data assets and capabilities, as well as customer expertise and data and technology assets, to help us jointly create high-value analytical products and services targeted at a broader range of customer needs. We seek to expand partnerships in order to further broaden the key customer domains and verticals that our products and services are able to serve.

•	Build a world-class Equifax team by investing in talent to drive our strategy and promote a culture of innovation. We attract top talent by providing opportunities to grow and lead within our company. We regularly undertake talent initiatives to engage, develop and retain our top talent.

---

(1)	Predominantly sold to companies who serve the direct-to-consumer market and includes other small end user markets. Mortgage and auto resellers are excluded from this category as they are included within their respective categories above.

(2)	Other includes revenue from other miscellaneous end-user markets.

---

---

---

---

•

Competition for our credit information solutions and direct-to-consumer solutions products varies by both application and industry, but generally includes two global consumer credit reporting companies, Experian and TransUnion, both of which offer a product suite similar to our credit information solutions. In the U.S., LifeLock is a national provider of personal identity theft protection service. Also, there are competitors offering free credit scores including Credit Karma in the U.S. and the U.K., ClearScore in the U.K., and Credit Simple and Credit Savvy in Australia. There are also a large number of competitors who offer competing products in specialized areas (such as fraud prevention, risk management and application processing and decisioning solutions) and software companies offering credit modeling services or analytical tools. Our differentiators include our unique data assets, decisioning technology and the features and functionality of our analytical capabilities. We emphasize our improved decision making and product quality while remaining competitive on price. Our marketing services products also compete with the foregoing companies and others who offer demographic information products, including Acxiom, Harte-Hanks and infoGROUP. We also compete with Fair Isaac Corporation with respect to certain of our analytical tools and solutions.

•	Competition for our commercial solutions products primarily includes Experian, Dun & Bradstreet and Cortera, and providers of these services in the international markets we serve.

•

Competition in the Verification Services market includes employers who manage verifications in-house, lenders who obtain verifications directly from employers, and other online and offline verification companies, such as CCC Verify, Thomas & Company, First Advantage and Employers Edge. Competition in the Employer Services market is diverse and includes in-house management of such services or the outsourcing of one or more of such services to other third-party outsourced providers like Corporate Cost Control, Thomas & Company, and Employers Edge; human resources (“HR”) consulting firms such as Mercer and Towers Watson; HR management services providers such as Oracle and Silk Road; payroll processors such as ADP and Ceridian; accounting firms such as PwC and EY; analytics companies such as Tableau and Visier; and hundreds of smaller companies that provide one or multiple offerings that compete with our Employer Services business.

•

Competition for our debt collection and recovery management software, services and analytics is similar to the competition for our consumer credit information solutions. We believe that the breadth and depth of our data assets enable our clients to develop a more current and comprehensive view of consumers. In the category of platforms and analytics, we compete to some extent with entities that deploy collections platforms, account management systems or recovery solutions.

---

---

•

FCRA - The Fair Credit Reporting Act (“FCRA”) regulates consumer reporting agencies, including us, as well as data furnishers and users of consumer reports such as banks and other companies. FCRA provisions govern the accuracy, fairness and privacy of information in the files of consumer reporting agencies (“CRAs”) that engage in the practice of assembling or evaluating certain information relating to consumers for certain specified purposes. The FCRA limits the type of information that may be reported by CRAs, limits the distribution and use of consumer reports and establishes consumer rights to access, freeze and dispute their credit files. CRAs are required to follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates and if a consumer disputes the accuracy of any information in the consumer’s file, to conduct a reasonable reinvestigation. CRAs are required to make available to consumers a free annual credit report and free credit freezes. The FCRA imposes many other requirements on CRAs, data furnishers and users of consumer report information. Violation of the FCRA can result in civil and criminal penalties. The FCRA contains an attorney fee shifting provision to provide an incentive for consumers to bring individual or class action lawsuits against a CRA for violations of the FCRA. Regulatory enforcement of the FCRA is under the purview of the United States Federal Trade Commission (“FTC”), the Consumer Financial Protection Bureau (“CFPB”), and state attorneys general, acting alone or in concert with one another.

•

The Dodd-Frank Act - Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act (“Dodd-Frank Act”) created the CFPB. The Dodd-Frank Act provides the CFPB with examination and supervisory authority over CRAs, including us. The Dodd-Frank Act prohibits unfair, deceptive or abusive acts or practices (“UDAAP”) with respect to consumer financial services practices and provides the CFPB with enforcement authority to enforce those provisions. The CFPB may pursue administrative proceedings or litigation to enforce the laws and rules subject to its jurisdiction. In these proceedings the CFPB can obtain cease and desist orders, which can include orders for restitution to consumers or rescission of contracts, as well as other types of affirmative relief, and monetary penalties ranging from $5,000 per day for ordinary violations and up to $1 million per day for known violations. Also, the Dodd-Frank Act empowers state attorneys general and state regulators to bring civil actions in certain circumstances for the kind of cease and desist orders available to the CFPB (but not for civil penalties).

•

FTC Act - The Federal Trade Commission Act (“FTC Act”) prohibits unfair methods of competition and unfair or deceptive acts or practices. Under the FTC Act, the Federal Trade Commission’s jurisdiction includes oversight of the security measures we employ to safeguard the personal data of consumers. Allegations that we failed to safeguard or handle such data in a compliant manner may subject us to regulatory scrutiny or enforcement action. There is no private right of action under the FTC Act.

•

GLBA - The Financial Services Modernization Act of 1999, or Gramm-Leach-Bliley Act (“GLBA”), regulates, among other things, the use of non-public personal information of consumers that is held by financial institutions, including us. We are subject to various GLBA provisions, including rules relating to the use or disclosure of the underlying data and rules relating to the physical, administrative and technological protection of non-public personal financial information. Breach of the GLBA can result in civil and/or criminal liability and sanctions by regulatory authorities. Regulatory enforcement of the GLBA is under the purview of the FTC, the CFPB, the federal prudential banking regulators, the SEC and state attorneys general, acting alone or in concert with each other.

•

CROA - The Credit Repair Organizations Act (“CROA”) regulates companies that claim to be able to assist consumers in improving their credit standing. There have been efforts to apply the CROA to credit monitoring services offered by consumer reporting agencies and others. CROA allows for a private right of action. Consumers can sue to recover the greater of the amount paid or actual damages, punitive damages, costs, and attorney’s fees for violations of CROA.

---

•

A number of states have enacted requirements similar to the federal FCRA. Some of these state laws impose additional, or more stringent, requirements than the FCRA, especially in connection with investigations and responses to reported inaccuracies in consumer reports. The FCRA preempts some of these state laws, but the scope of preemption continues to be defined by the courts. The state of Vermont is grandfathered under the original FCRA requirements and thus we are subject to additional requirements to comply with Vermont law.

•

A majority of states have adopted versions of data security breach laws that require notification of affected consumers and potentially regulators in the event of a breach of personal information. A subset of these laws and other state data security laws require the implementation of data security measures as well. State attorneys general can enforce such state laws and can seek equitable as well as monetary remedies and in some cases private rights of action are permitted by such laws.

•	The New York State Department of Financial Services (“NYDFS”) has enacted regulatory requirements applicable to CRAs that require registration with that agency, prohibit unfair and deceptive consumer practices and require compliance with significant portions of the NYDFS cybersecurity rules.

•

We may also become subject to and affected by new and proposed state privacy laws such as the California Consumer Privacy Act which takes effect in 2020 and which will impose additional data privacy requirements on many businesses operating in the state, including, potentially, with respect to employee data in addition to consumer data. A number of states, such as Maryland, Massachusetts and Washington, appear to be following California’s lead and have introduced comprehensive data privacy legislation modeled after the California Consumer Privacy Act or the European General Data Protection Regulation.

•

State banking and financial services regulatory agencies have asserted either express or implied authority under applicable state laws to examine us as a third-party service provider to financial institutions, and in certain cases to bring enforcement actions against us. Generally, such examinations, and related enforcement actions, are focused on assessing our safety and soundness in support of financial institutions we serve.

•

We are also subject to federal and state laws that are generally applicable to any U.S. business with national or international operations, such as antitrust laws, the Foreign Corrupt Practices Act, the Americans with Disabilities Act, state unfair or deceptive practices acts and various employment laws. We continuously monitor legislative and regulatory activities that involve credit reporting, data privacy, security and other relevant issues to identify issues in order to remain in compliance with all applicable laws and regulations.

•

In the U.K., we are subject to a regulatory framework which provides for primary regulation by the Financial Conduct Authority (the “FCA”). The FCA focuses on consumer protection, the integrity of the U.K. financial system, and effective competition in the interests of consumers. The FCA has significant powers, including the power to regulate conduct related to the marketing of financial products, to specify minimum standards and to place requirements on products, impose unlimited fines, and to investigate organizations and individuals. In addition, the FCA is able to ban financial products for up to a year while considering an indefinite ban; it has the power to instruct firms to immediately retract or modify promotions which it finds to be misleading, and to publish such decisions. Effective December 2019, the FCA framework under which we operate will also include the “senior managers and certification regime” which among other things will allow the FCA to bring an enforcement action directly against designated personnel who do not take reasonable steps to avoid non-compliance. Our core credit reporting (“credit reference”) and debt collections services and recovery management businesses in the U.K. are subject to FCA supervision. In addition to regulation by the FCA, we are also subject to regulation by the U.K. Information Commissioner’s Office, which focuses on upholding information rights in the public interest and the protection of data privacy for individuals.

•	In Europe, we are subject to the European General Data Protection Regulation (“GDPR”). The GDPR establishes multiple data protection requirements that are more specific and comprehensive than those of the U.S. and most

---

•

In Canada, federal and provincial laws govern how we collect, use or disclose personal information in the course of our commercial activities. Federally, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) governs the collection, use and disclosure of personal information by organizations in the private sector. It sets out specific obligations with respect to accountability and identifying purposes, consent, collection, use, disclosure, retention, accuracy, safeguards, personal data breach reporting, individual access and compliance. The federal and provincial privacy regulators have powers of investigation and intervention, and provisions of Canadian law regarding civil liability apply in the event of unlawful processing which is prejudicial to the persons concerned. Canada also has specific credit reporting legislation that is regulated at a provincial level. At present, each province has credit reporting legislation, with the exception of New Brunswick and the Territories (Northwest Territories, Yukon, and Nunavut). Generally speaking, the legislation regulates the contents of credit files, the length of time information can be included on a credit file and who can receive credit reports.

•

In Latin America, data protection and credit reporting laws and regulations vary considerably among Latin American countries. Some countries, such as El Salvador, Ecuador and Honduras, establish a constitutional right to privacy without general data protection standards or a data protection authority. These countries, however, have laws that govern the functioning of credit bureaus. In 2018, Ecuador amended a 2017 law relating to the collection of credit data and the operation of a credit bureau within the country allowing the existence of private credit bureaus along with the public credit data registry to be established. Other countries, such as Argentina, Uruguay, Peru, Costa Rica and most recently Brazil have enacted comprehensive data protection legislation similar to the European GDPR. The EU recognizes Argentina and Uruguay as having adequate levels of protection for personal data transfers and processing. Peru also has a specific law for credit reporting. Paraguay and Chile have fewer comprehensive data protection laws in place, but do have rules regarding reporting periods, consent and data collection.

•

In Australia, we are subject to regulatory oversight by various agencies. The Office of the Australian Information Commissioner (“OAIC”) is the agency with direct responsibility for administering the Australian Privacy Principles (which relate to the collection, holding, use and disclosure of personal information) and Part IIIA of the Privacy Act 1988 (which regulates credit reporting). The OAIC can investigate a complaint, conduct its own investigations, resolve/make binding determinations and seek civil penalties. Our credit reporting business, Equifax Information Services and Solutions, is a member of an external dispute resolution scheme, the Australian Financial Complaints Authority, which has been approved by the OAIC to handle privacy and credit reporting complaints and make binding determinations. The OAIC can register codes of practice under the Privacy Act 1988, and has registered the Privacy (Credit Reporting) Code 2014. The Australian Competition and Consumer Commission (“ACCC”) is the agency responsible for enforcing the Competition and Consumer Act of 2010 and related legislation concerning consumer protection and competition. The ACCC has the authority to use a range of actions to ensure compliance with the law, including investigative powers and the ability to seek penalties through litigation and other formal enforcement means. The Australian Retail Credit Association (“ARCA”) is a credit and credit reporting industry self-regulatory body, which administers principles and standards for the exchange of credit data between industry participants. Equifax Australasia Credit Ratings Pty Limited (formerly named Corporate Scorecard Pty Limited, one of our Australian subsidiaries), holds an Australia Financial Services License (“AFSL”), which allows it to provide general advice to wholesale clients by issuing a credit rating, and has been approved by the Reserve Bank of New Zealand as a rating agency under section 86 of the Non-bank Deposit Takers Act of 2013. The Australian Securities and Investments Commission (“ASIC”) regulates that business, and has authority to investigate, prosecute, ban individuals, and to seek civil penalties. In addition, in Australia, draft legislation has been released by the Federal Government, mandating the supply by large banks of comprehensive credit information to credit reporting bodies, including Equifax, and imposing certain disclosure, storage and reporting obligations on the credit reporting bodies.

•

In New Zealand, the regulatory framework provides for primary regulation under the Office of the Privacy Commissioner (“NZ OPC”). The NZ OPC investigates complaints relating to the collection, use, holding and disclosure of personal information, both credit-related and non-credit related. The NZ OPC can make a finding that there has been an interference with privacy but cannot impose civil penalties. In extreme cases where there has been an interference with privacy it can refer these cases to the Director of Human Rights for determination in the Human Rights Review Tribunal. The NZ OPC can issue practice codes under the Privacy Act 1993, and has issued and subsequently amended, the Credit Reporting Privacy Code 2004. A self-regulatory body, the Retail

---

•

In India, various legislation including the Information Technology Act of 2000 and rules framed thereunder and the Credit Information Companies (Regulation) Act of 2005 and rules and regulations framed thereunder, establishes a federal data protection framework. Entities that collect and maintain personal data and/or credit information must ensure that it is complete, accurate and safeguarded, and must adopt certain privacy principles with respect to collecting, processing, preserving, sharing and using such data and/or credit information. The Indian parliament has passed legislation that would allow individuals to sue for damages in the case of a data breach, if the entity negligently failed to implement reasonable security practices and procedures to protect personal data and/or credit information and in 2018 the Personal Data Protection Bill was released by the Indian government and is expected to be enacted and eventually to impose additional requirements in this area. Our Indian joint venture is subject to regulation by the Reserve Bank of India, which is India’s central banking institution.

•	In Russia, credit reporting activities are governed by the Federal Law on Credit Histories No.218-fz, dated December 30, 2004. The law regulates the contents of credit files, who may submit data to a credit bureau and who can receive credit reports. Russia has also enacted a comprehensive data protection law that is similar to Europe’s approach.

---

---

---

---

---

---

---

•	amendment, enactment or interpretation of laws and regulations that restrict the access and use of personal information and reduce the availability or effectiveness of our solutions or the supply of data available to customers;

•	changes in cultural and consumer attitudes in favor of further restrictions on information collection and sharing, which may lead to regulations that prevent full utilization of our solutions;

•	failure of data suppliers or customers to comply with laws or regulations, where mutual compliance is required;

•	failure of our solutions to comply with current laws and regulations; and

•	failure of our solutions to adapt to changes in the regulatory environment in an efficient, cost effective manner.

---

•	changes in specific country or region political, economic or other conditions;

•	trade protection measures;

•	data privacy and consumer protection regulations;

•	difficulty in staffing and managing widespread operations;

•	differing labor, intellectual property protection and technology standards and regulations;

•	business licensing requirements or other requirements relating to making foreign direct investments, which could increase our cost of doing business in certain jurisdictions, prevent us from entering certain markets, increase our operating costs or lead to penalties or restrictions;

•	difficulties associated with repatriating cash generated or held abroad in a tax-efficient manner;

•	implementation of exchange controls;

•	geopolitical instability, including terrorism and war;

•	foreign currency changes;

•	increased travel, infrastructure, legal and compliance costs of multiple international locations;

•	foreign laws and regulatory requirements;

•	terrorist activity, natural disasters and other catastrophic events;

•	restrictions on the import and export of technologies;

•	difficulties in enforcing contracts and collecting accounts receivable;

•	longer payment cycles;

•	failure to meet quality standards for outsourced work;

•	unfavorable tax rules;

•	the presence and acceptance of varying level of business corruption in international markets; and

•	varying business practices in foreign countries

---

---

---

---

---

---

---

---

---

---

(1)

The total number of shares purchased includes, if applicable: (a) shares purchased pursuant to our publicly-announced share repurchase program, or Program; and (b) shares surrendered, or deemed surrendered, in satisfaction of the exercise price and/or to satisfy tax withholding obligations in connection with the exercise of employee stock options and vesting of restricted stock, totaling 540 shares for the month of October 2018, 295 shares for the month of November 2018 and 7,044 shares for the month of December 2018.

(2)	Average price paid per share for shares purchased as part of our Program (includes brokerage commissions).

(3)	We did not repurchase any common shares during the twelve months ended December 31, 2018. At December 31, 2018, the amount authorized for future share repurchases under the Program was $590.1 million.

---

(1)

During the year ended December 31, 2018, the Company recorded $401.2 million of pre-tax expenses related to the 2017 cybersecurity incident and insurance recoveries of $75.0 million for net expenses of $326.2 million. Costs related to the 2017 cybersecurity incident are defined as incremental costs to transform our information technology infrastructure and data security; legal fees and professional services costs to investigate the 2017 cybersecurity incident and respond to legal, government and regulatory claims; as well as costs to provide the free product and related support to the consumer.

(2)

During the fourth quarter of 2018, we recorded a restructuring charge of $46.1 million all of which is recorded in selling, general, and administrative expenses in our Consolidated Statements of Income. The restructuring charge primarily relates to a reduction in headcount to support the Company’s strategic objectives and increase the integration of our global operations. For additional information, see Note 11 of the Notes to the Consolidated Financial Statements in this report.

---

(3)

During the year ended December 31, 2017, the Company recorded $164.0 million of pre-tax expenses related to the 2017 cybersecurity incident and insurance recoveries of $50.0 million for net expenses of $114.0 million. Expenses include costs to investigate and remediate the 2017 cybersecurity incident and legal and other professional services related thereto, all of which were expensed as incurred. Additionally, as a result of the 2017 cybersecurity incident, we offered free credit file monitoring and identity theft protection to all U.S. consumers. We recorded the expenses necessary to provide this service to those who signed up during 2017. For additional information, see Note 6 of the Notes to the Consolidated Financial Statements in this report.

(4)

The Tax Cuts and Jobs Act of 2017 (“Tax Act”), as signed by the President of the United States on December 22, 2017, significantly revised U.S. tax law. The legislation positively impacted the Company’s ongoing effective tax rate due to the reduction of the U.S. federal corporate tax rate from 35% to 21%. The Tax Act made major changes to the U.S. international tax system. Under previous law, foreign earnings were subject to U.S. tax when repatriated to the U.S. Under the Tax Act, foreign earnings are generally exempt from U.S. tax. Additionally, there is a one-time deemed repatriation tax on undistributed foreign earnings and profits (the “transition tax”). The Tax Act imposes other U.S. taxes on “global intangible low taxed income” and “base erosion anti-abuse transactions.” Other significant changes included limitations on the deductibility of interest expense and executive compensation, and repeal of the deduction for domestic production activities. As a result of the current interpretation and estimated impact of the Tax Act, the Company recorded adjustments totaling a net tax benefit of $48.3 million in the fourth quarter of 2017 to provisionally account for the estimated impact. Refer to Note 7 of the Notes to the Consolidated Financial Statements in this Form 10-K for additional information. We also prospectively applied the provisions of ASU 2016-09 “Compensation - Stock Compensation (Topic 718),” related to the recognition of windfall tax benefits in the Consolidated Statement of Income which resulted in the recognition of $26.7 million of tax benefits for the year ended December 31, 2017.

(5)

In the first quarter of 2016, we completed the acquisition of 100% of the ordinary voting shares of Veda for cash consideration plus debt assumed of approximately $1.9 billion. For the year ended December 31, 2016, we recorded $40.2 million ($28.2 million, net of tax) for Veda acquisition related amounts. Of this amount, $30.1 million relates to transaction and integration costs in operating income, $9.2 million is recorded in other income and is the impact of foreign currency changes on the transaction structure, including the economic hedges, $0.2 million is recorded in depreciation and amortization, and $0.7 million is recorded in interest expense.

(6)

In the first quarter of 2015, we recorded a $20.7 million restructuring charge ($13.2 million, net of tax) all of which was recorded in selling, general and administrative expenses on our Consolidated Statements of Income. This charge resulted from our continuing efforts to realign our internal resources to support the Company’s strategic objectives and increase the integration of our global operations.

(7)

During the second quarter of 2015, the management of Boa Vista Servicos S.A. (“BVS”), in which we hold a 15% cost method investment, updated the financial projections of BVS. The updated projections, along with the continued weakness in the Brazilian consumer and small commercial credit markets were considered indicators of impairment. As a result of these changes, and the associated near-term changes in cash flow expected from the business, we recorded a 46.0 million Brazilian Reais ($14.8 million) impairment of our investment.

(8)	During the first quarter of 2014, we acquired 100% of the stock of TDX, a data, technology and services company in the United Kingdom that specializes in debt collections and recovery management through the use of analytics, data exchanges and technology platforms. The results of this acquisition have been included in our USIS and International operating segments subsequent to the acquisition.

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

•

We did not repurchase any shares in 2018 and 2016. Under share repurchase programs authorized by our Board of Directors, we repurchased 0.5 million common shares during the twelve months ended December 31, 2017, for $77.1 million, at an average price per common share of $143.88. As of December 31, 2018, under the existing board authorization, the Company is approved for additional stock repurchases valued at $590.1 million.

•	During the twelve months ended December 31, 2018, 2017 and 2016, we paid cash dividends to Equifax shareholders of $187.9 million, $187.4 million and $157.6 million, respectively, at $1.56 per share for 2018 and 2017, and $1.32 per share for 2016.

---

(1)	The amounts are gross of unamortized discounts totaling $19.4 million at December 31, 2018. Total debt on our Consolidated Balance Sheets is net of the unamortized discounts and fair value adjustments. There were no fair value adjustments to our debt at December 31, 2018.

(2)	Our operating lease obligations principally involve office space and equipment, which include the ground lease associated with our headquarters building that expires in 2048.

(3)	These agreements primarily represent our minimum contractual obligations for services that we outsource associated with our computer data processing operations and related functions, and certain administrative functions. These agreements expire between 2019 and 2026.

(4)

These long-term liabilities primarily relate to obligations associated with certain pension, postretirement and other compensation-related plans, some of which are discounted in accordance with U.S. generally accepted accounting principles, or GAAP. We made certain assumptions about the timing of such future payments. In the table above, we have not included amounts related to future pension plan obligations, as such required funding amounts beyond 2019 have not been deemed necessary due to our current expectations regarding future plan asset performance.

(5)	This table excludes $24.9 million of unrecognized tax benefits, including interest and penalties, as we cannot make a reasonably reliable estimate of the period of cash settlement with the respective taxing authorities.

(6)

For future interest payments on variable-rate debt, which bears a rate equal to three-month LIBOR on the interest determination date plus 0.87% per annum, we used the variable rate in effect at December 31, 2018 to calculate these payments. Our outstanding variable rate debt at December 31, 2018, consisted of the Floating Rate Notes. The variable rate at December 31, 2018 was 3.5%. Future interest payments may be different depending on future borrowing activity and interest rates.

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

*	At December 31, 2018, $590.1 million was authorized for future repurchases of our common stock.

---

---

•	U.S. Information Solutions, or USIS

•	International

•	Workforce Solutions

•	Global Consumer Solutions

---

---

---

---

---

---

---

(1)

We maintain deferred compensation plans that allow for certain management employees to defer the receipt of compensation (such as salary, incentive compensation and commissions) until a later date based on the terms of the plans. The liability representing benefits accrued for plan participants is valued at the quoted market prices of the participants’ investment elections. The asset consists of mutual funds reflective of the participants investment selections and is valued at daily quoted market prices.

---

---

---

---

---

---

(1)	Identifiable intangible assets are further disaggregated in the following table.

(2)

The goodwill related to DataX Ltd. is included in the USIS operating segment and the goodwill related to the other 2018 acquisitions is included in the Workforce Solutions and International operating segments. The goodwill related to the 2018 acquisitions is not deductible for tax purposes. The 2017 goodwill related to ID Watchdog, Inc. and Mercury is included in the GCS and International operating segments, respectively, and is not deductible for tax purposes.

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

(1)	Fair value is based on observable market prices for the assets.

(2)	For the portion of this asset class categorized as Level 2, fair value is determined using dealer and broker quotations, certain pricing models, bid prices, quoted prices for similar assets and liabilities in active markets, or other inputs that are observable or can be corroborated by observable market data.

(3)

Private equity investments are initially valued at cost. Fund managers periodically review the valuations utilizing subsequent company-specific transactions or deterioration in the company’s financial performance to determine if fair value adjustments are necessary. Private equity investments are typically viewed as long term, less liquid investments with return of capital coming via cash distributions from the sale of underlying fund assets. The Plan intends to hold these investments through each fund’s normal life cycle and wind down period. As of December 31, 2018 and 2017, we had $9.9 million and $10.7 million, respectively, of remaining commitments related to these private equity investments.

(4)	Fair value is reported by the fund manager based on observable market prices for actively traded assets within the funds, as well as financial models, comparable financial transactions or other factors relevant to the specific asset for assets with no observable market. These investments are redeemable quarterly with a range of 30 – 90 days notice.

(5)

The fair value of Real Assets are reported by the fund manager based on a combination of the following valuation approaches: current replacement cost less deterioration and obsolescence, a discounted cash flow model of income streams, and comparable market sales. As of December 31, 2018 and 2017, we had $0.1 million and $0.5 million, respectively, of remaining commitments related to the real asset investments.

---

---

(1)	Fair value is based on observable market prices for the assets.

(2)	For the portion of this asset class categorized as Level 2, fair value is determined using dealer and broker quotations, certain pricing models, bid prices, quoted prices for similar assets and liabilities in active markets, or other inputs that are observable or can be corroborated by observable market data.

(3)

Private equity investments are initially valued at cost. Fund managers periodically review the valuations utilizing subsequent company-specific transactions or deterioration in the company’s financial performance to determine if fair value adjustments are necessary. Private equity investments are typically viewed as long term, less liquid investments with return of capital coming via cash distributions from the sale of underlying fund assets. The Plan intends to hold these investments through each fund’s normal life cycle and wind down period.

(4)	Fair value is reported by the fund manager based on observable market prices for actively traded assets within the funds, as well as financial models, comparable financial transactions or other factors relevant to the specific asset for assets with no observable market. These investments are redeemable quarterly with a range of 30 – 90 days notice.

(5)	The fair value of Real Assets are reported by the fund manager based on a combination of the following valuation approaches: current replacement cost less deterioration and obsolescence, a discounted cash flow model of income streams and comparable market sales.

---

---

•	The Executive Life and Supplemental Retirement Benefit Plan Grantor Trust was used to ensure that the insurance premiums due under the Executive Life and Supplemental Retirement Benefit Plan were paid in case we fail to make scheduled payments following a change in control, as defined in this trust agreement. This trust was terminated in 2016 as the obligations noted above were satisfied.

•	The Supplemental Retirement Plan Grantor Trust’s assets are dedicated to ensure the payment of benefits accrued under our Supplemental Retirement Plan in case of a change in control, as defined in this trust agreement.

---

(1)	These accumulated other comprehensive income(loss) components are included in the computation of net periodic pension cost (See Note 9 Benefit Plans for additional details).

•	U.S. Information Solutions

•	International

•	Workforce Solutions

•	Global Consumer Solutions

---

---

---

*	The sum of the quarterly EPS does not equal the annual EPS due to changes in the weighted-average shares between periods. Other amounts may not equal the annual total due to rounding between periods.

•	For the year ended December 31, 2018, we recorded $326.2 million in pre-tax expenses related to the 2017 cybersecurity incident. In addition, we recorded a charge for the realignment of resources and other costs of $46.1 million in the fourth quarter of 2018.

---

•	For the year ended December 31, 2017, we recorded $114.0 million in pretax expenses related to the 2017 cybersecurity incident. In addition, as a result of the Tax Act the company recorded preliminary adjustments totaling a net tax benefit of $48.3 million in the fourth quarter of 2017.

---

•	pertain to the maintenance of records that in reasonable detail accurately and fairly reflect transactions and dispositions of our assets;

•	provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that our receipts and expenditures are being made only in accordance with authorizations of our management and directors; and

•	provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on the financial statements.

---

---

---

(a)	List of Documents Filed as a Part of This Report:

(1)	Financial Statements. The following financial statements are included in Item 8 of Part II:

•	Consolidated Balance Sheets — December 31, 2018 and 2017;

•	Consolidated Statements of Income for the Years Ended December 31, 2018, 2017 and 2016;

•	Consolidated Statements of Comprehensive Income for the Years Ended December 31, 2018, 2017 and 2016;

•	Consolidated Statements of Cash Flows for the Years Ended December 31, 2018, 2017 and 2016;

•	Consolidated Statements of Shareholders’ Equity and Other Comprehensive Income for the Years Ended December 31, 2018, 2017 and 2016; and

•	Notes to Consolidated Financial Statements.

(2)	Financial Statement Schedules.

(3)	Exhibits. See exhibits listed under Part (b) below.

---

---

---

---

---

---