Equifax Inc and its Canadian unit dropped short of their privacy obligations, a federal agency said on Tuesday after an investigation at the credit reporting company.