Equifax Inc and its Canadian unit fell far short of their privacy obligations, a Canadian federal agency said on Tuesday following an investigation into the 2017 data breach at the credit reporting company.