Dun and Bradstreet Inc.

Dun and Bradstreet Inc. is a registered data mining company located in Jacksonville, Florida. Dun and Bradstreet Inc. engages in the collection of personal information, which may include: financial status; health status; immigration status; sexual orientation; children’s personal information; biometric data; geolocation data; reproductive health care data; public records data; and court judgment data. Dun and Bradstreet Inc. sells, for profit, certain personal information to customers, of which type may include: private businesses; law enforcement agencies; state governments; the U.S. federal government; foreign entities; and artificial intelligence (AI) developers. (See below for the specific data collection and sales practices of Dun and Bradstreet Inc..)

To opt-out of data collection and sale by Dun and Bradstreet Inc., individual consumers must submit their request to Dun and Bradstreet Inc. directly. California residents may use the state’s Delete Request and Opt-Out Platform (DROP) to submit a single request that forces Dun and Bradstreet Inc., as well as +600 registered data brokers, to delete and stop selling their data. (If you don’t live in California, you must submit removal requests directly through the privacy portal of each data mining company.)

In addition, all Americans have access to their special credit reports and special credit scores. These companies maintain consumer files relating to medical records and payments; residential and tenant history; banking and checking writing history; employment and work history; and insurance claims history (auto, property, life, long-term care, disability). View the Directory of Special Credit Reporting Agencies to request your files and scores.

Company Details

Company Contact Information

What Types of Data does Dun and Bradstreet Inc. Collect?

• Dun and Bradstreet Inc. collects personal information of minors: No.
• Dun and Bradstreet Inc. collects consumers’ account logins or numbers with security codes that grant access to third‑party accounts: No.
• Dun and Bradstreet Inc. collects consumers’ government‑issued identification numbers used to verify an individual’s identity: No.
• Dun and Bradstreet Inc. collects consumers’ citizenship data, including immigration status: No.
• Dun and Bradstreet Inc. collects consumers’ union membership status: No.
• Dun and Bradstreet Inc. collects consumers’ sexual orientation status: No.
• Dun and Bradstreet Inc. collects consumers’ gender identity and gender expression data: No.
• Dun and Bradstreet Inc. collects consumers’ biometric data: No.
• Dun and Bradstreet Inc. collects consumers’ precise geolocation: No.
• Dun and Bradstreet Inc. collects consumers’ reproductive health care data: No.

What Categories of Customers does Dun and Bradstreet Inc. Sell To?

• Dun and Bradstreet Inc. shared or sold consumers’ data to a foreign actor in the past year: No.
• Dun and Bradstreet Inc. shared or sold consumers’ data to the federal government in the past year: Yes.
• Dun and Bradstreet Inc. shared or sold consumers’ data to other state governments in the past year: Yes.
• Dun and Bradstreet Inc. shared or sold consumers’ data to law enforcement in the past year, except when required by subpoena or court order: Yes.
• Dun and Bradstreet Inc. shared or sold consumers’ data to a developer of a generative artificial intelligence (AI) system or model in the past year: Yes.

Do Other Data Protection Laws Apply to Dun and Bradstreet Inc.?

• Is Dun and Bradstreet Inc. or any of its subsidiaries is regulated by the federal Fair Credit Reporting Act: No.
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the FCRA, describe the types of personal information covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the FCRA, describe the specific products or services covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the FCRA, describe the percentage of data activities covered:
• Is Dun and Bradstreet Inc. or any of its subsidiaries is regulated by the Gramm‑Leach‑Bliley Act (GLBA) and implementing regulations: No.
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the GLBA, describe the types of personal information covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the GLBA, describe the specific products or services covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the GLBA, describe the percentage of data activities covered:
• Is Dun and Bradstreet Inc. or any of its subsidiaries is regulated by the California Insurance Information and Privacy Protection Act (IIPPA): No.
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the IIPPA, describe the types of personal information covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the IIPPA, describe the specific products or services covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the IIPPA, describe the percentage of data activities covered:
• Is Dun and Bradstreet Inc. or any of its subsidiaries is regulated by the California Confidentiality of Medical Information Act (CMIA): No.
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the CMIA, describe the types of personal information covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the CMIA, describe the specific products or services covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by the CMIA, describe the percentage of data activities covered:
• Is Dun and Bradstreet Inc. or its subsidiaries are regulated by the HIPAA privacy, security, and breach‑notification rules: No.
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by HIPAA, describe the types of personal information covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by HIPAA, describe the specific products or services covered:
• If Dun and Bradstreet Inc. or its subsidiaries are regulated by HIPAA, describe the percentage of data activities covered:

Did Dun and Bradstreet Inc. Provide Additional Context or Comments?

For additional information about our data collection practices, please see our Privacy, Data Transparency, and AI Trust Centre available at: https://www.dnb.com/en-us/why-dnb/data-transparency.html and our Privacy, Data and AI Transparency Statement at https://www.dnb.com/content/dam/web/company/about/content/pdaits/DnB_Privacy-Data-AI-Transparency-Statement_USMarket.pdf If you would like to see the CCPA categories of information we collect, please look under the “Data Collected on California Residents within the Past 12 Months” section of the California Resident Supplemental Disclosures available at: https://www.dnb.com/content/dam/web/company/about/content/scrd/DnB_Supplemental-California-Resident-Disclosures.pdf

With regard to the submitted metrics, when an individual submits a “Right to Know” request we advise the individual what personal information we have collected about them, what personal information was sold or shared and to whom it was sold or shared. Therefore, the numbers for both questions regarding the “Right to Know” are the same. With regard to the number of requests that have been “complied with in whole or in part”, we do not have separate metrics as we have interpreted “comply” to mean comply with the CPRA and “in whole OR In part” as one figure. As we fully comply with the CPRA we do not have any requests that were partially complied with. Additionally, any difference found between the number of requests Received and the number of requests Complied With is because our metrics are based on the actual requests received and closed during that year. Therefore, there are requests received in December 2024, which were complied with within the required timeline, but actually in January 2025.