Better Health for All

Thomson Reuters' core business involves providing information services in legal, tax, accounting, financial, risk management, and media markets. These products and services do not inherently have direct positive or negative health impacts, nor do they carry health risks requiring disclosure. The company does not offer health-related products or services that would necessitate considerations for price accessibility, clinical trials, nutrition, or addiction mitigation. While the company invests in AI and has strong environmental performance (100% renewable energy, over 91% reduction in Scope 1 & 2 GHG emissions from 2018 baseline), these initiatives are not explicitly linked to direct health outcomes or externalities.

There is no evidence of investment in health-specific innovation, health equity programs, healthcare workforce support, preventative health measures, health education initiatives, or mental health support related to its core business or external impact. The company's pro bono legal services, while beneficial, are not health-specific.

Fair Money & Economic Opportunity

Thomson Reuters provides business information services to professionals, not consumer lending or deposit services. Therefore, several KPIs, including underserved client share, pricing fairness, exploitative fee exposure, inclusion initiatives, data accessibility, fair lending compliance, debt burden ratio, and product simplicity, are not applicable to its core business model and are scored as 0. The company's social impact programs, while beneficial, do not constitute financial services or consumer finance data management as defined by the rubric. For profit reinvestment, Thomson Reuters donated over $2.3 million through grants and charitable giving in 2024

, and $320,000 to 33 charities since 2020 , which maps to the -20 tier. Financial literacy initiatives include a project providing educational videos on budgeting, banking, and debt management , targeting underserved communities across the U.S. , which aligns with the -40 tier. Geographic inclusion efforts include social impact grants to 92 nonprofit organizations across nine countries and scholarships for rural youth in India , mapping to the -40 tier.

Fair Trade & Ethical Sourcing

All suppliers transacting with Thomson Reuters are required to comply with the company's Supply Chain Ethical Code, which applies worldwide.

The company conducted a company-wide human rights impact assessment of global operations, products, and services. Thomson Reuters spent an average of 7% of its total U.S.-based spend with diverse suppliers, with a commitment to maintain this for 2024.

Honest & Fair Business

No specific, concrete evidence was found across the provided articles to score any of the KPIs for Honest & Fair Business for Thomson Reuters Corp. Information regarding regulatory fines

, , , , , transparency index scores , , , , , whistleblower policies , , , , , financial restatements , , , , , audit coverage percentage , , , , , ESG controversy index , , , , , complaint resolution time , , , , , board conflict-free percentage , , , , , anti-corruption policy strength , , , , , or third-party verification extent , , was not explicitly stated with quantitative data or specific actions by the company.

No War, No Weapons

Thomson Reuters Special Services (TRSS), a division of Thomson Reuters, received a $9 million contract from the U.S. Department of Defense (DOD) from 2018-2022 to evaluate anti-social engineering tools.

TRSS has received over $60 million in DOD contracts since 2010 and over $120 million from multiple federal agencies. A new contract for $29.1 million from DARPA (DOD) for Doppler research began in September 2024 and is set to end in June 2027. The contract for 'Active Social Engineering and Large Scale Social Deception' involved developing automated defenses against social engineering attacks, which is a technology with potential dual-use applications. TRSS is governed by an independent board of directors.

Safe & Smart Tech

Thomson Reuters experienced a significant data breach between October 21-26, 2023, exposing 3TB of sensitive customer and platform data, including plaintext passwords to third-party servers and over 6.9 million unique logs.

This incident was attributed to a misconfiguration of AWS Elastic Load Balancing, indicating a failure in vulnerability management. The exposure of plaintext passwords highlights a severe weakness in encryption implementation and authentication security. The company's privacy statement for 2024 shows a high rejection rate for user data requests, with 299 out of 343 data access requests and 303 out of 590 deletion requests rejected, suggesting limited user data control. While Thomson Reuters has certified adherence to the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks, it also states that privacy and information security training is mandatory for all employees handling personal data, but does not provide completion rates or effectiveness metrics. The company's privacy statement indicates data retention periods of 5-7 years for most data, and the collection of data 'just in case' it might be useful. The company's AI-related papers discuss the importance of AI audits, transparency, and privacy by design, but do not provide evidence of the company's own implementation or effectiveness in these areas. The company's privacy statement mentions a commitment to GDPR compliance and a 'Privacy Matters' program launched in early 2018, but the 2023 data breach and plaintext password exposure suggest gaps in actual compliance and security practices.