If you used Equifax’s website to find out if you were affected by their widespread data breach, you may have unknowingly signed away your right to sue the company, according to Business Insider.
The breach affected 143 million Americans, and Equifax created a website so consumers could see if they were part of the group hit by the data breach. After entering their last name and Social Security number, consumers could sign up for a one-year monitoring service, TrustedID Premier.
The only catch? Signing up for the monitoring service forces consumers to give up their right to join a class-action suit, Business Insider reported. After the company came under fire for this, they added a clause to its terms of service that allows people to opt out of being bound by the mandatory arbitration provision — but only if they notify Equifax by mail within 30 days of enrolling in the service.
It’s unclear if the arbitration clause only applies to the credit monitoring service, or if it could prevent consumers from suing over the data breach, Business Insider reported. But regardless, legal experts told Business Insider that the clause is troublesome with how broad it is.
New York Attorney General Eric Schneiderman tweeted about the clause, saying the language was “unacceptable and unenforceable.”