Document ID: chunk:federal_register_of_legislation:C2015C00053:clause:2_20e
Version: federal_register_of_legislation:C2015C00053
Segment Type: clause
Provision Reference: sch 2 cl 20E
Character Range: 113237–115913

20E  Use or disclosure of credit reporting information

Prohibition on use or disclosure
 (1) If a credit reporting body holds credit reporting information about an individual, the body must not use or disclose the information.
Civil penalty: 2,000 penalty units.

Permitted uses
 (2) Subsection (1) does not apply to the use of credit reporting information about the individual if:
 (a) the credit reporting body uses the information in the course of carrying on the body's credit reporting business; or
 (b) the use is required or authorised by or under an Australian law or a court/tribunal order; or
 (c) the use is a use prescribed by the regulations.

Permitted disclosures
(3)  Subsection (1) does not apply to the disclosure of credit reporting information about the individual if:
 (a) the disclosure is a permitted CRB disclosure in relation to the individual; or
 (b) the disclosure is to another credit reporting body that has an Australian link; or
 (c) both of the following apply:
 (i) the disclosure is for the purposes of a recognised external dispute resolution scheme;
 (ii) a credit reporting body or credit provider is a member of the scheme; or
 (d) both of the following apply:
 (i) the disclosure is to an enforcement body;
 (ii) the credit reporting body is satisfied that the body, or another enforcement body, believes on reasonable grounds that the individual has committed a serious credit infringement; or
 (e) the disclosure is required or authorised by or under an Australian law or a court/tribunal order; or
 (f) the disclosure is a disclosure prescribed by the regulations.
 (4) However, if the credit reporting information is, or was derived from, repayment history information about the individual, the credit reporting body must not disclose the information under paragraph (3)(a) or (f) unless the recipient of the information is:
 (a) a credit provider who is a licensee or is prescribed by the regulations; or
 (b) a mortgage insurer.
Civil penalty: 2,000 penalty units.
 (5) If a credit reporting body discloses credit reporting information under this section, the body must make a written note of that disclosure.
Civil penalty: 500 penalty units.
Note: Other Acts may provide that the note must not be made (see for example the Australian Crime Commission Act 2002 and the Law Enforcement Integrity Commissioner Act 2006).

No use or disclosure for the purposes of direct marketing
 (6) This section does not apply to the use or disclosure of credit reporting information for the purposes of direct marketing.
Note: Section 20G deals with the use or disclosure of credit reporting information for the purposes of direct marketing.