PRIVACY ACT 1988

PART IIIA - CREDIT REPORTING  

Division 2 - Credit reporting bodies  

Subdivision D - Dealing with credit reporting information etc.  

SECTION 20E   USE OR DISCLOSURE OF CREDIT REPORTING INFORMATION  

Prohibition on use or disclosure

20E(1)  
If a credit reporting body holds credit reporting information about an individual, the body must not use or disclose the information.

Civil penalty: 2,000 penalty units.

Permitted uses

20E(2)  
Subsection (1) does not apply to the use of credit reporting information about the individual if:


(a) the credit reporting body uses the information in the course of carrying on the body ' s credit reporting business; or


(b) the use is required or authorised by or under an Australian law (other than the consumer data rules) or a court/tribunal order; or


(c) the use is a use prescribed by the regulations.

Permitted disclosures

20E(3)  
Subsection (1) does not apply to the disclosure of credit reporting information about the individual if:


(a) the disclosure is a permitted CRB disclosure in relation to the individual; or


(b) the disclosure is to another credit reporting body that has an Australian link; or


(c) both of the following apply:


(i) the disclosure is for the purposes of a recognised external dispute resolution scheme;

(ii) a credit reporting body or credit provider is a member of the scheme; or


(d) both of the following apply:


(i) the disclosure is to an enforcement body;

(ii) the credit reporting body is satisfied that the body, or another enforcement body, believes on reasonable grounds that the individual has committed a serious credit infringement; or


(e) the disclosure is required or authorised by or under an Australian law (other than the consumer data rules) or a court/tribunal order; or


(f) the disclosure is a disclosure prescribed by the regulations.

20E(4)  
However, if the credit reporting information is, or was derived from, repayment history information about the individual, the credit reporting body must not disclose the information under paragraph (3)(a) or (f) unless the recipient of the information is:


(a) a credit provider who is a licensee or is prescribed by the regulations; or


(b) a mortgage insurer.

Civil penalty: 2,000 penalty units.

20E(5)  
If a credit reporting body discloses credit reporting information under this section, the body must make a written note of that disclosure.

Civil penalty: 500 penalty units.

Note:

Other Acts may provide that the note must not be made (see for example the Australian Crime Commission Act 2002 and the Law Enforcement Integrity Commissioner Act 2006 ).

No use or disclosure for the purposes of direct marketing

20E(6)  
This section does not apply to the use or disclosure of credit reporting information for the purposes of direct marketing.

Note:

Section 20G deals with the use or disclosure of credit reporting information for the purposes of direct marketing.




This information is provided by CCH Australia Limited Link opens in new window. View the disclaimer and notice of copyright.