Privacy Act 1988

PART IIIA - CREDIT REPORTING  

Division 6 - Unauthorised obtaining of credit reporting information etc.  

SECTION 24   OBTAINING CREDIT REPORTING INFORMATION FROM A CREDIT REPORTING BODY  

Offences

24(1)    
An entity commits an offence if:

(a) the entity obtains credit reporting information; and

(b) the information is obtained from a credit reporting body; and

(c) the entity is not:

(i) an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

(ii) an access seeker for the information.

Penalty: 200 penalty units.

24(2)    
An entity commits an offence if:

(a) the entity obtains credit reporting information; and

(b) the information is obtained from a credit reporting body; and

(c) the information is obtained by false pretence.

Penalty: 200 penalty units.

Civil penalties

24(3)    
An entity must not obtain credit reporting information from a credit reporting body if the entity is not:

(a) an entity to which the body is permitted to disclose the information under Division 2 of this Part; or

(b) an access seeker for the information.

Civil penalty: 2,000 penalty units.

24(4)    
An entity must not obtain, by false pretence, credit reporting information from a credit reporting body.

Civil penalty: 2,000 penalty units.